tls: Add TLS 1.0, 1.1, 1.2 decode and decryption

What it can do:
- Decodes records and most standard messages and extensions.
- Decryptes records and reassemples application data stream if a keylog is provided
  and the cipher suite is supported.
- Supports most recommended and used ciphers and a bunch of older ones.

What it can't do:
- SSL v3 maybe supported, is similar to TLS 1.0, not tested.
- Decryption and renegotiation/cipher change.
- Record defragmentation not supported, seems rare over TCP.
- TLS 1.3
- SSL v2 but v2 compat header is supported.
- Some key exchange messages not decoded yet

Decryption code is heavly based on golang crypto/tls and zmap/zcrypto.

Will be base for decoding http2 and other TLS based on protocols.

Fixes #587

.golangci.yml

@@ -23,6 +23,7 @@ linters:
         - unconvert
         - unparam
         - wastedassign
+
 linters-settings:
     exhaustive:
         default-signifies-exhaustive: true
@@ -36,9 +37,12 @@ linters-settings:
             - rela
             - equalisation
             - synchronisation
+
 run:
     timeout: 5m
     skip-dirs:
         # allow md5
         - dev
         - doc
+        # ignore warnings in code from crypto/tls and zmap/zcrypto
+        - format/tls/tlsdecrypt

README.md

@@ -132,6 +132,7 @@ sll_packet,
 tar,
 tcp_segment,
 tiff,
+[tls](doc/formats.md#tls),
 toml,
 [tzif](doc/formats.md#tzif),
 udp_datagram,
@@ -310,3 +311,4 @@ Licenses of direct dependencies:
 - golang/snappy https://github.com/golang/snappy/blob/master/LICENSE (BSD)
 - golang/x/* https://github.com/golang/text/blob/master/LICENSE (BSD)
 - gopkg.in/yaml.v3 https://github.com/go-yaml/yaml/blob/v3/LICENSE (MIT)
+- Parts of go crypto/tls and github.com/zmap/zcrypto https://github.com/zmap/zcrypto/blob/master/LICENSE (Apache)

doc/formats.md

@@ -102,6 +102,7 @@
 |`tar`                                                   |Tar&nbsp;archive                                                                                             |<sub>`probe`</sub>|
 |`tcp_segment`                                           |Transmission&nbsp;control&nbsp;protocol&nbsp;segment                                                         |<sub></sub>|
 |`tiff`                                                  |Tag&nbsp;Image&nbsp;File&nbsp;Format                                                                         |<sub>`icc_profile`</sub>|
+|[`tls`](#tls)                                           |Transport&nbsp;layer&nbsp;security                                                                           |<sub>`asn1_ber`</sub>|
 |`toml`                                                  |Tom's&nbsp;Obvious,&nbsp;Minimal&nbsp;Language                                                               |<sub></sub>|
 |[`tzif`](#tzif)                                         |Time&nbsp;Zone&nbsp;Information&nbsp;Format                                                                  |<sub></sub>|
 |`udp_datagram`                                          |User&nbsp;datagram&nbsp;protocol                                                                             |<sub>`udp_payload`</sub>|
@@ -123,7 +124,7 @@
 |`link_frame`                                            |Group                                                                                                        |<sub>`bsd_loopback_frame` `ether8023_frame` `ipv4_packet` `ipv6_packet` `sll2_packet` `sll_packet`</sub>|
 |`mp3_frame_tags`                                        |Group                                                                                                        |<sub>`mp3_frame_vbri` `mp3_frame_xing`</sub>|
 |`probe`                                                 |Group                                                                                                        |<sub>`adts` `apple_bookmark` `ar` `avi` `avro_ocf` `bitcoin_blkdat` `bplist` `bzip2` `elf` `flac` `gif` `gzip` `jpeg` `json` `jsonl` `macho` `macho_fat` `matroska` `mp3` `mp4` `mpeg_ts` `ogg` `pcap` `pcapng` `png` `tar` `tiff` `toml` `tzif` `wasm` `wav` `webp` `xml` `yaml` `zip`</sub>|
-|`tcp_stream`                                            |Group                                                                                                        |<sub>`dns_tcp` `rtmp`</sub>|
+|`tcp_stream`                                            |Group                                                                                                        |<sub>`dns_tcp` `rtmp` `tls`</sub>|
 |`udp_payload`                                           |Group                                                                                                        |<sub>`dns`</sub>|
 
 [#]: sh-end
@@ -839,6 +840,153 @@ fq '.tcp_connections[] | select(.server.port=="rtmp") | d' file.cap
 - https://rtmp.veriskope.com/docs/spec/
 - https://rtmp.veriskope.com/pdf/video_file_format_spec_v10.pdf
 
+## tls
+
+### Options
+
+|Name    |Default|Description|
+|-       |-      |-|
+|`keylog`|       |NSS Key Log content|
+
+### Examples
+
+Decode file using tls options
+```
+$ fq -d tls -o keylog="" . file
+```
+
+Decode value as tls
+```
+... | tls({keylog:""})
+```
+
+Supports decoding of most standard records, messages and extensions. Can also decrypt most standard cipher suits in a PCAP with traffic in both directions if a NSS key log is provided.
+
+### Decode and decrypt provding a PCAP and key log
+
+Write traffic to a PCAP file:
+
+```sh
+$ tcpdump -i <iface> -w traffic.pcap
+```
+
+Make sure your curl TLS backend support `SSLKEYLOGFILE` and do:
+```sh
+$ SSLKEYLOGFILE=traffic.keylog curl --tls-max 1.2 https://host/path
+```
+
+Decode, decrypt and query. Uses `keylog=@<path>` to read option value from keylog file:
+```sh
+# decode and show whole tree
+$ fq -o keylog=@traffic.keylog d traffic.pcap
+
+# write unencrypted server response to a file.
+# first .stream is the TCP stream, second .stream is TLS application data stream
+#
+# first TCP connections:
+$ fq -o keylog=@traffic.keylog '.tcp_connections[0].server.stream.stream | tobytes' traffic.pcap > data
+# first TLS connection:
+$ fq -o keylog=@traffic.keylog  'first(grep_by(.server.stream | format == "tls")).server.stream.stream | tobytes' > data
+```
+
+### Supported cipher suites for decryption
+
+`TLS_DH_ANON_EXPORT_WITH_DES40_CBC_SHA`,
+`TLS_DH_ANON_EXPORT_WITH_RC4_40_MD5`,
+`TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA`,
+`TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA`,
+`TLS_DHE_DSS_WITH_AES_128_CBC_SHA`,
+`TLS_DHE_DSS_WITH_AES_128_CBC_SHA256`,
+`TLS_DHE_DSS_WITH_AES_128_GCM_SHA256`,
+`TLS_DHE_DSS_WITH_AES_256_CBC_SHA`,
+`TLS_DHE_DSS_WITH_AES_256_CBC_SHA256`,
+`TLS_DHE_DSS_WITH_AES_256_GCM_SHA384`,
+`TLS_DHE_DSS_WITH_DES_CBC_SHA`,
+`TLS_DHE_DSS_WITH_RC4_128_SHA`,
+`TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA`,
+`TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_DHE_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_DHE_RSA_WITH_AES_128_CBC_SHA256`,
+`TLS_DHE_RSA_WITH_AES_128_GCM_SHA256`,
+`TLS_DHE_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_DHE_RSA_WITH_AES_256_CBC_SHA256`,
+`TLS_DHE_RSA_WITH_AES_256_GCM_SHA384`,
+`TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256`,
+`TLS_DHE_RSA_WITH_DES_CBC_SHA`,
+`TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256`,
+`TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256`,
+`TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384`,
+`TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384`,
+`TLS_ECDH_ECDSA_WITH_RC4_128_SHA`,
+`TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_ECDH_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256`,
+`TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256`,
+`TLS_ECDH_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384`,
+`TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384`,
+`TLS_ECDH_RSA_WITH_RC4_128_SHA`,
+`TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256`,
+`TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`,
+`TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384`,
+`TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384eadAESGCM`,
+`TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256`,
+`TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305`,
+`TLS_ECDHE_ECDSA_WITH_RC4_128_SHA`,
+`TLS_ECDHE_ECDSA_WITH_RC4_128_SHA`,
+`TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA`,
+`TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256`,
+`TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`,
+`TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`,
+`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`,
+`TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`,
+`TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256`,
+`TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305`,
+`TLS_ECDHE_RSA_WITH_RC4_128_SHA`,
+`TLS_ECDHE_RSA_WITH_RC4_128_SHA`,
+`TLS_PSK_WITH_AES_128_CBC_SHA`,
+`TLS_PSK_WITH_AES_256_CBC_SHA`,
+`TLS_PSK_WITH_RC4_128_SHA`,
+`TLS_RSA_EXPORT_WITH_DES40_CBC_SHA`,
+`TLS_RSA_EXPORT_WITH_RC4_40_MD5`,
+`TLS_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_RSA_WITH_3DES_EDE_CBC_SHA`,
+`TLS_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_RSA_WITH_AES_128_CBC_SHA`,
+`TLS_RSA_WITH_AES_128_CBC_SHA256`,
+`TLS_RSA_WITH_AES_128_CBC_SHA256`,
+`TLS_RSA_WITH_AES_128_GCM_SHA256`,
+`TLS_RSA_WITH_AES_128_GCM_SHA256`,
+`TLS_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_RSA_WITH_AES_256_CBC_SHA`,
+`TLS_RSA_WITH_AES_256_CBC_SHA256`,
+`TLS_RSA_WITH_AES_256_GCM_SHA384`,
+`TLS_RSA_WITH_AES_256_GCM_SHA384`,
+`TLS_RSA_WITH_DES_CBC_SHA`,
+`TLS_RSA_WITH_RC4_128_MD5`,
+`TLS_RSA_WITH_RC4_128_SHA`,
+`TLS_RSA_WITH_RC4_128_SHA`
+
+### References
+
+- [RFC 5246: The Transport Layer Security (TLS) Protocol](https://www.rfc-editor.org/rfc/rfc5246)
+- [RFC 6101: The Secure Sockets Layer (SSL) Protocol Version 3.0](https://www.rfc-editor.org/rfc/rfc)
+
 ## tzif
 
 ### Get last transition time

format/all/all.fqtest

@@ -135,6 +135,7 @@ sll_packet           Linux cooked capture encapsulation
 tar                  Tar archive
 tcp_segment          Transmission control protocol segment
 tiff                 Tag Image File Format
+tls                  Transport layer security
 toml                 Tom's Obvious, Minimal Language
 tzif                 Time Zone Information Format
 udp_datagram         User datagram protocol

format/all/all.go

@@ -49,6 +49,7 @@ import (
 	_ "github.com/wader/fq/format/tar"
 	_ "github.com/wader/fq/format/text"
 	_ "github.com/wader/fq/format/tiff"
+	_ "github.com/wader/fq/format/tls"
 	_ "github.com/wader/fq/format/toml"
 	_ "github.com/wader/fq/format/tzif"
 	_ "github.com/wader/fq/format/vorbis"

format/format.go

@@ -97,8 +97,8 @@ const (
 	MATROSKA            = "matroska"
 	MP3                 = "mp3"
 	MP3_FRAME           = "mp3_frame"
-	MP3_FRAME_XING      = "mp3_frame_xing"
 	MP3_FRAME_VBRI      = "mp3_frame_vbri"
+	MP3_FRAME_XING      = "mp3_frame_xing"
 	MP4                 = "mp4"
 	MPEG_ASC            = "mpeg_asc"
 	MPEG_ES             = "mpeg_es"
@@ -123,6 +123,7 @@ const (
 	TAR                 = "tar"
 	TCP_SEGMENT         = "tcp_segment"
 	TIFF                = "tiff"
+	TLS                 = "tls"
 	TOML                = "toml"
 	TZIF                = "tzif"
 	UDP_DATAGRAM        = "udp_datagram"
@@ -283,6 +284,11 @@ type TCPStreamIn struct {
 	DestinationPort int
 }
 
+type TCPStreamOut struct {
+	PostFn func(peerIn any)
+	InArg  any
+}
+
 func (t TCPStreamIn) IsPort(ports ...int) bool {
 	for _, p := range ports {
 		if (t.IsClient && t.DestinationPort == p) ||
@@ -332,3 +338,7 @@ type CSVLIn struct {
 type BitCoinBlockIn struct {
 	HasHeader bool `doc:"Has blkdat header"`
 }
+
+type TLSIn struct {
+	Keylog string `doc:"NSS Key Log content"`
+}

format/pcap/shared.go

@@ -36,7 +36,7 @@ func fieldFlows(d *decode.D, fd *flowsdecoder.Decoder, tcpStreamFormat decode.Gr
 	d.FieldArray("tcp_connections", func(d *decode.D) {
 		for _, s := range fd.TCPConnections {
 			d.FieldStruct("tcp_connection", func(d *decode.D) {
-				f := func(d *decode.D, td *flowsdecoder.TCPDirection, tsi format.TCPStreamIn) {
+				f := func(d *decode.D, td *flowsdecoder.TCPDirection, tsi format.TCPStreamIn) any {
 					d.FieldValueStr("ip", td.Endpoint.IP.String())
 					d.FieldValueUint("port", uint64(td.Endpoint.Port), format.TCPPortMap)
 					d.FieldValueBool("has_start", td.HasStart)
@@ -44,18 +44,22 @@ func fieldFlows(d *decode.D, fd *flowsdecoder.Decoder, tcpStreamFormat decode.Gr
 					d.FieldValueUint("skipped_bytes", td.SkippedBytes)
 
 					br := bitio.NewBitReader(td.Buffer.Bytes(), -1)
-					if dv, _, _ := d.TryFieldFormatBitBuf(
+					dv, outV, _ := d.TryFieldFormatBitBuf(
 						"stream",
 						br,
 						tcpStreamFormat,
 						tsi,
-					); dv == nil {
+					)
+					if dv == nil {
 						d.FieldRootBitBuf("stream", br)
 					}
+					return outV
 				}
 
+				var clientV any
+				var serverV any
 				d.FieldStruct("client", func(d *decode.D) {
-					f(d, &s.Client, format.TCPStreamIn{
+					clientV = f(d, &s.Client, format.TCPStreamIn{
 						IsClient:        true,
 						HasStart:        s.Client.HasStart,
 						HasEnd:          s.Client.HasEnd,
@@ -65,7 +69,7 @@ func fieldFlows(d *decode.D, fd *flowsdecoder.Decoder, tcpStreamFormat decode.Gr
 					})
 				})
 				d.FieldStruct("server", func(d *decode.D) {
-					f(d, &s.Server, format.TCPStreamIn{
+					serverV = f(d, &s.Server, format.TCPStreamIn{
 						IsClient:        false,
 						HasStart:        s.Server.HasStart,
 						HasEnd:          s.Server.HasEnd,
@@ -74,6 +78,17 @@ func fieldFlows(d *decode.D, fd *flowsdecoder.Decoder, tcpStreamFormat decode.Gr
 						DestinationPort: s.Client.Endpoint.Port,
 					})
 				})
+
+				clientTo, clientToOk := clientV.(format.TCPStreamOut)
+				serverTo, serverToOk := serverV.(format.TCPStreamOut)
+				if clientToOk && serverToOk {
+					if clientTo.PostFn != nil {
+						clientTo.PostFn(serverTo.InArg)
+					}
+					if serverTo.PostFn != nil {
+						serverTo.PostFn(clientTo.InArg)
+					}
+				}
 			})
 		}
 	})

format/pcap/testdata/many_interfaces.fqtest

@@ -5521,18 +5521,303 @@ $ fq -d pcapng dv many_interfaces.pcapng
        |                                               |                |          has_start: true 0x51b8-NA (0)
        |                                               |                |          has_end: false 0x51b8-NA (0)
        |                                               |                |          skipped_bytes: 0 0x51b8-NA (0)
-       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          stream{}: (tls) 0x0-0x7b0.7 (1969)
-  0x000|16 03 01 02 00 01 00 01 fc 03 03 f0 91 bc 87 3e|...............>|          stream: raw bits 0x0-0x7b0.7 (1969)
+       |                                               |                |            records[0:9]: 0x0-0x7b0.7 (1969)
-  *    |until 0x7b0.7 (end) (1969)                     |                |
+       |                                               |                |              [0]{}: record 0x0-0x204.7 (517)
+  0x000|16                                             |.               |                type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |                version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         02 00                                 |   ..           |                length: 512 0x3-0x4.7 (2)
+       |                                               |                |                message{}: 0x5-0x204.7 (512)
+  0x000|               01                              |     .          |                  type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 01 fc                     |      ...       |                  length: 508 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |                  version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |                  random{}: 0xb-0x2a.7 (32)
+  0x000|                                 f0 91 bc 87   |           .... |                    gmt_unix_time: 4036082823 (2097-11-23T22:07:03Z) 0xb-0xe.7 (4)
+  0x000|                                             3e|               >|                    random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|ed 9d cc 98 4a 6a 2e 84 3f 5c 1d 9b a9 e9 df f6|....Jj..?\......|
+  0x002|5c 48 e8 17 3d 49 b9 a7 b4 1b 19               |\H..=I.....     |
+  0x002|                                 20            |                |                  session_id_length: 32 0x2b-0x2b.7 (1)
+  0x002|                                    6e 55 2a c2|            nU*.|                  session_id: raw bits 0x2c-0x4b.7 (32)
+  0x003|7e 89 b4 14 11 29 e5 e5 eb f0 2f 68 ca b6 16 f6|~....)..../h....|
+  0x004|ef 0a 82 f9 16 c8 53 f6 8d d5 1b 50            |......S....P    |
+  0x004|                                    00 22      |            ."  |                  cipher_suits_length: 34 0x4c-0x4d.7 (2)
+       |                                               |                |                  cipher_suits[0:17]: 0x4e-0x6f.7 (34)
+  0x004|                                          c0 2b|              .+|                    [0]: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" (0xc02b) cipher_suit 0x4e-0x4f.7 (2)
+  0x005|c0 2f                                          |./              |                    [1]: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" (0xc02f) cipher_suit 0x50-0x51.7 (2)
+  0x005|      00 9e                                    |  ..            |                    [2]: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" (0x9e) cipher_suit 0x52-0x53.7 (2)
+  0x005|            cc 14                              |    ..          |                    [3]: 0xcc14 cipher_suit 0x54-0x55.7 (2)
+  0x005|                  cc 13                        |      ..        |                    [4]: 0xcc13 cipher_suit 0x56-0x57.7 (2)
+  0x005|                        cc 15                  |        ..      |                    [5]: 0xcc15 cipher_suit 0x58-0x59.7 (2)
+  0x005|                              c0 0a            |          ..    |                    [6]: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" (0xc00a) cipher_suit 0x5a-0x5b.7 (2)
+  0x005|                                    c0 14      |            ..  |                    [7]: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" (0xc014) cipher_suit 0x5c-0x5d.7 (2)
+  0x005|                                          00 39|              .9|                    [8]: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA" (0x39) cipher_suit 0x5e-0x5f.7 (2)
+  0x006|c0 09                                          |..              |                    [9]: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" (0xc009) cipher_suit 0x60-0x61.7 (2)
+  0x006|      c0 13                                    |  ..            |                    [10]: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" (0xc013) cipher_suit 0x62-0x63.7 (2)
+  0x006|            00 33                              |    .3          |                    [11]: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" (0x33) cipher_suit 0x64-0x65.7 (2)
+  0x006|                  00 9c                        |      ..        |                    [12]: "TLS_RSA_WITH_AES_128_GCM_SHA256" (0x9c) cipher_suit 0x66-0x67.7 (2)
+  0x006|                        00 35                  |        .5      |                    [13]: "TLS_RSA_WITH_AES_256_CBC_SHA" (0x35) cipher_suit 0x68-0x69.7 (2)
+  0x006|                              00 2f            |          ./    |                    [14]: "TLS_RSA_WITH_AES_128_CBC_SHA" (0x2f) cipher_suit 0x6a-0x6b.7 (2)
+  0x006|                                    00 0a      |            ..  |                    [15]: "TLS_RSA_WITH_3DES_EDE_CBC_SHA" (0xa) cipher_suit 0x6c-0x6d.7 (2)
+  0x006|                                          00 ff|              ..|                    [16]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x6e-0x6f.7 (2)
+  0x007|01                                             |.               |                  compression_methods_length: 1 0x70-0x70.7 (1)
+       |                                               |                |                  compression_methods[0:1]: 0x71-0x71.7 (1)
+  0x007|   00                                          | .              |                    [0]: "null" (0x0) compression_method 0x71-0x71.7 (1)
+  0x007|      01 91                                    |  ..            |                  extensions_length: 401 0x72-0x73.7 (2)
+       |                                               |                |                  extensions[0:11]: 0x74-0x204.7 (401)
+       |                                               |                |                    [0]{}: extension 0x74-0x8f.7 (28)
+  0x007|            00 00                              |    ..          |                      type: "server_name" (0) 0x74-0x75.7 (2)
+  0x007|                  00 18                        |      ..        |                      length: 24 0x76-0x77.7 (2)
+  0x007|                        00 16                  |        ..      |                      serer_names_length: 22 0x78-0x79.7 (2)
+       |                                               |                |                      server_names[0:1]: 0x7a-0x8f.7 (22)
+       |                                               |                |                        [0]{}: server_name 0x7a-0x8f.7 (22)
+  0x007|                              00               |          .     |                          type: 0 0x7a-0x7a.7 (1)
+  0x007|                                 00 13         |           ..   |                          length: 19 0x7b-0x7c.7 (2)
+  0x007|                                       63 6c 69|             cli|                          name: "clients6.google.com" 0x7d-0x8f.7 (19)
+  0x008|65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d|ents6.google.com|
+       |                                               |                |                    [1]{}: extension 0x90-0x93.7 (4)
+  0x009|00 17                                          |..              |                      type: "extended_master_secret" (23) 0x90-0x91.7 (2)
+  0x009|      00 00                                    |  ..            |                      length: 0 0x92-0x93.7 (2)
+       |                                               |                |                    [2]{}: extension 0x94-0x14b.7 (184)
+  0x009|            00 23                              |    .#          |                      type: "session_ticket" (35) 0x94-0x95.7 (2)
+  0x009|                  00 b4                        |      ..        |                      length: 180 0x96-0x97.7 (2)
+  0x009|                        e9 e5 4f 1a f4 6d 30 79|        ..O..m0y|                      data: raw bits 0x98-0x14b.7 (180)
+  0x00a|5e 25 a9 66 2c 13 95 b3 f3 99 d9 de b7 54 73 88|^%.f,........Ts.|
+  *    |until 0x14b.7 (180)                            |                |
+       |                                               |                |                    [3]{}: extension 0x14c-0x165.7 (26)
+  0x014|                                    00 0d      |            ..  |                      type: "signature_algorithms" (13) 0x14c-0x14d.7 (2)
+  0x014|                                          00 16|              ..|                      length: 22 0x14e-0x14f.7 (2)
+  0x015|00 14                                          |..              |                      signature_algorithm_length: 20 0x150-0x151.7 (2)
+       |                                               |                |                      signature_algorithms[0:10]: 0x152-0x165.7 (20)
+       |                                               |                |                        [0]{}: signature_algorithm 0x152-0x153.7 (2)
+  0x015|      06                                       |  .             |                          hash: "sha512" (6) 0x152-0x152.7 (1)
+  0x015|         01                                    |   .            |                          signature: "rsa" (1) 0x153-0x153.7 (1)
+       |                                               |                |                        [1]{}: signature_algorithm 0x154-0x155.7 (2)
+  0x015|            06                                 |    .           |                          hash: "sha512" (6) 0x154-0x154.7 (1)
+  0x015|               03                              |     .          |                          signature: "ecdsa" (3) 0x155-0x155.7 (1)
+       |                                               |                |                        [2]{}: signature_algorithm 0x156-0x157.7 (2)
+  0x015|                  05                           |      .         |                          hash: "sha384" (5) 0x156-0x156.7 (1)
+  0x015|                     01                        |       .        |                          signature: "rsa" (1) 0x157-0x157.7 (1)
+       |                                               |                |                        [3]{}: signature_algorithm 0x158-0x159.7 (2)
+  0x015|                        05                     |        .       |                          hash: "sha384" (5) 0x158-0x158.7 (1)
+  0x015|                           03                  |         .      |                          signature: "ecdsa" (3) 0x159-0x159.7 (1)
+       |                                               |                |                        [4]{}: signature_algorithm 0x15a-0x15b.7 (2)
+  0x015|                              04               |          .     |                          hash: "sha256" (4) 0x15a-0x15a.7 (1)
+  0x015|                                 01            |           .    |                          signature: "rsa" (1) 0x15b-0x15b.7 (1)
+       |                                               |                |                        [5]{}: signature_algorithm 0x15c-0x15d.7 (2)
+  0x015|                                    04         |            .   |                          hash: "sha256" (4) 0x15c-0x15c.7 (1)
+  0x015|                                       03      |             .  |                          signature: "ecdsa" (3) 0x15d-0x15d.7 (1)
+       |                                               |                |                        [6]{}: signature_algorithm 0x15e-0x15f.7 (2)
+  0x015|                                          03   |              . |                          hash: "sha224" (3) 0x15e-0x15e.7 (1)
+  0x015|                                             01|               .|                          signature: "rsa" (1) 0x15f-0x15f.7 (1)
+       |                                               |                |                        [7]{}: signature_algorithm 0x160-0x161.7 (2)
+  0x016|03                                             |.               |                          hash: "sha224" (3) 0x160-0x160.7 (1)
+  0x016|   03                                          | .              |                          signature: "ecdsa" (3) 0x161-0x161.7 (1)
+       |                                               |                |                        [8]{}: signature_algorithm 0x162-0x163.7 (2)
+  0x016|      02                                       |  .             |                          hash: "sha1" (2) 0x162-0x162.7 (1)
+  0x016|         01                                    |   .            |                          signature: "rsa" (1) 0x163-0x163.7 (1)
+       |                                               |                |                        [9]{}: signature_algorithm 0x164-0x165.7 (2)
+  0x016|            02                                 |    .           |                          hash: "sha1" (2) 0x164-0x164.7 (1)
+  0x016|               03                              |     .          |                          signature: "ecdsa" (3) 0x165-0x165.7 (1)
+       |                                               |                |                    [4]{}: extension 0x166-0x16e.7 (9)
+  0x016|                  00 05                        |      ..        |                      type: "status_request" (5) 0x166-0x167.7 (2)
+  0x016|                        00 05                  |        ..      |                      length: 5 0x168-0x169.7 (2)
+  0x016|                              01 00 00 00 00   |          ..... |                      data: raw bits 0x16a-0x16e.7 (5)
+       |                                               |                |                    [5]{}: extension 0x16f-0x172.7 (4)
+  0x016|                                             33|               3|                      type: 13172 0x16f-0x170.7 (2)
+  0x017|74                                             |t               |
+  0x017|   00 00                                       | ..             |                      length: 0 0x171-0x172.7 (2)
+       |                                               |                |                    [6]{}: extension 0x173-0x176.7 (4)
+  0x017|         00 12                                 |   ..           |                      type: "signed_certificate_timestamp" (18) 0x173-0x174.7 (2)
+  0x017|               00 00                           |     ..         |                      length: 0 0x175-0x176.7 (2)
+       |                                               |                |                    [7]{}: extension 0x177-0x197.7 (33)
+  0x017|                     00 10                     |       ..       |                      type: "application_layer_protocol_negotiation" (16) 0x177-0x178.7 (2)
+  0x017|                           00 1d               |         ..     |                      length: 29 0x179-0x17a.7 (2)
+  0x017|                                 00 1b         |           ..   |                      serer_names_length: 27 0x17b-0x17c.7 (2)
+       |                                               |                |                      protocols[0:4]: 0x17d-0x197.7 (27)
+       |                                               |                |                        [0]{}: protocol 0x17d-0x185.7 (9)
+  0x017|                                       08      |             .  |                          length: 8 0x17d-0x17d.7 (1)
+  0x017|                                          68 74|              ht|                          name: "http/1.1" 0x17e-0x185.7 (8)
+  0x018|74 70 2f 31 2e 31                              |tp/1.1          |
+       |                                               |                |                        [1]{}: protocol 0x186-0x18e.7 (9)
+  0x018|                  08                           |      .         |                          length: 8 0x186-0x186.7 (1)
+  0x018|                     73 70 64 79 2f 33 2e 31   |       spdy/3.1 |                          name: "spdy/3.1" 0x187-0x18e.7 (8)
+       |                                               |                |                        [2]{}: protocol 0x18f-0x194.7 (6)
+  0x018|                                             05|               .|                          length: 5 0x18f-0x18f.7 (1)
+  0x019|68 32 2d 31 34                                 |h2-14           |                          name: "h2-14" 0x190-0x194.7 (5)
+       |                                               |                |                        [3]{}: protocol 0x195-0x197.7 (3)
+  0x019|               02                              |     .          |                          length: 2 0x195-0x195.7 (1)
+  0x019|                  68 32                        |      h2        |                          name: "h2" 0x196-0x197.7 (2)
+       |                                               |                |                    [8]{}: extension 0x198-0x19d.7 (6)
+  0x019|                        00 0b                  |        ..      |                      type: "ec_point_formats" (11) 0x198-0x199.7 (2)
+  0x019|                              00 02            |          ..    |                      length: 2 0x19a-0x19b.7 (2)
+  0x019|                                    01         |            .   |                      ex_points_format_length: 1 0x19c-0x19c.7 (1)
+       |                                               |                |                      ex_points_formats[0:1]: 0x19d-0x19d.7 (1)
+  0x019|                                       00      |             .  |                        [0]: 0x0 ex_points_format 0x19d-0x19d.7 (1)
+       |                                               |                |                    [9]{}: extension 0x19e-0x1a7.7 (10)
+  0x019|                                          00 0a|              ..|                      type: "supported_groups" (10) 0x19e-0x19f.7 (2)
+  0x01a|00 06                                          |..              |                      length: 6 0x1a0-0x1a1.7 (2)
+  0x01a|      00 04                                    |  ..            |                      supported_group_length: 4 0x1a2-0x1a3.7 (2)
+       |                                               |                |                      supported_groups[0:2]: 0x1a4-0x1a7.7 (4)
+  0x01a|            00 17                              |    ..          |                        [0]: 0x17 supported_group 0x1a4-0x1a5.7 (2)
+  0x01a|                  00 18                        |      ..        |                        [1]: 0x18 supported_group 0x1a6-0x1a7.7 (2)
+       |                                               |                |                    [10]{}: extension 0x1a8-0x204.7 (93)
+  0x01a|                        00 15                  |        ..      |                      type: "padding" (21) 0x1a8-0x1a9.7 (2)
+  0x01a|                              00 59            |          .Y    |                      length: 89 0x1aa-0x1ab.7 (2)
+  0x01a|                                    00 00 00 00|            ....|                      data: raw bits 0x1ac-0x204.7 (89)
+  0x01b|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|
+  *    |until 0x204.7 (89)                             |                |
+       |                                               |                |              [1]{}: record 0x205-0x20a.7 (6)
+  0x020|               14                              |     .          |                type: "change_cipher_spec" (20) (valid) 0x205-0x205.7 (1)
+  0x020|                  03 03                        |      ..        |                version: "tls1.2" (0x303) (valid) 0x206-0x207.7 (2)
+  0x020|                        00 01                  |        ..      |                length: 1 0x208-0x209.7 (2)
+       |                                               |                |                message{}: 0x20a-0x20a.7 (1)
+  0x020|                              01               |          .     |                  type: 1 0x20a-0x20a.7 (1)
+       |                                               |                |              [2]{}: record 0x20b-0x237.7 (45)
+  0x020|                                 16            |           .    |                type: "handshake" (22) (valid) 0x20b-0x20b.7 (1)
+  0x020|                                    03 03      |            ..  |                version: "tls1.2" (0x303) (valid) 0x20c-0x20d.7 (2)
+  0x020|                                          00 28|              .(|                length: 40 0x20e-0x20f.7 (2)
+  0x021|00 00 00 00 00 00 00 00 2f 64 40 f5 c5 eb af 4b|......../d@....K|                encrypted_data: raw bits 0x210-0x237.7 (40)
+  *    |until 0x237.7 (40)                             |                |
+       |                                               |                |              [3]{}: record 0x238-0x26c.7 (53)
+  0x023|                        17                     |        .       |                type: "application_data" (23) (valid) 0x238-0x238.7 (1)
+  0x023|                           03 03               |         ..     |                version: "tls1.2" (0x303) (valid) 0x239-0x23a.7 (2)
+  0x023|                                 00 30         |           .0   |                length: 48 0x23b-0x23c.7 (2)
+  0x023|                                       00 00 00|             ...|                encrypted_data: raw bits 0x23d-0x26c.7 (48)
+  0x024|00 00 00 00 01 51 98 2a 12 b0 5e 2e 35 29 ba 2d|.....Q.*..^.5).-|
+  *    |until 0x26c.7 (48)                             |                |
+       |                                               |                |              [4]{}: record 0x26d-0x29e.7 (50)
+  0x026|                                       17      |             .  |                type: "application_data" (23) (valid) 0x26d-0x26d.7 (1)
+  0x026|                                          03 03|              ..|                version: "tls1.2" (0x303) (valid) 0x26e-0x26f.7 (2)
+  0x027|00 2d                                          |.-              |                length: 45 0x270-0x271.7 (2)
+  0x027|      00 00 00 00 00 00 00 02 f0 bc fa 7b fe 22|  ...........{."|                encrypted_data: raw bits 0x272-0x29e.7 (45)
+  0x028|8d 11 11 1b 0b 72 db 65 ef b6 5f 2c 8c 04 9b e7|.....r.e.._,....|
+  0x029|87 ba 5a bd 62 17 28 dc 39 33 ff f6 5e 4a 2b   |..Z.b.(.93..^J+ |
+       |                                               |                |              [5]{}: record 0x29f-0x2c8.7 (42)
+  0x029|                                             17|               .|                type: "application_data" (23) (valid) 0x29f-0x29f.7 (1)
+  0x02a|03 03                                          |..              |                version: "tls1.2" (0x303) (valid) 0x2a0-0x2a1.7 (2)
+  0x02a|      00 25                                    |  .%            |                length: 37 0x2a2-0x2a3.7 (2)
+  0x02a|            00 00 00 00 00 00 00 03 91 f4 86 be|    ............|                encrypted_data: raw bits 0x2a4-0x2c8.7 (37)
+  0x02b|5b 2a 4f 9f 3e d2 32 71 30 db fe f1 f2 16 a6 ba|[*O.>.2q0.......|
+  0x02c|e7 4f 84 c5 b9 98 24 e4 bf                     |.O....$..       |
+       |                                               |                |              [6]{}: record 0x2c9-0x75c.7 (1172)
+  0x02c|                           17                  |         .      |                type: "application_data" (23) (valid) 0x2c9-0x2c9.7 (1)
+  0x02c|                              03 03            |          ..    |                version: "tls1.2" (0x303) (valid) 0x2ca-0x2cb.7 (2)
+  0x02c|                                    04 8f      |            ..  |                length: 1167 0x2cc-0x2cd.7 (2)
+  0x02c|                                          00 00|              ..|                encrypted_data: raw bits 0x2ce-0x75c.7 (1167)
+  0x02d|00 00 00 00 00 04 98 59 fb 7c d9 ba ce c7 cc 54|.......Y.|.....T|
+  *    |until 0x75c.7 (1167)                           |                |
+       |                                               |                |              [7]{}: record 0x75d-0x782.7 (38)
+  0x075|                                       17      |             .  |                type: "application_data" (23) (valid) 0x75d-0x75d.7 (1)
+  0x075|                                          03 03|              ..|                version: "tls1.2" (0x303) (valid) 0x75e-0x75f.7 (2)
+  0x076|00 21                                          |.!              |                length: 33 0x760-0x761.7 (2)
+  0x076|      00 00 00 00 00 00 00 05 04 b0 d9 88 2d 7d|  ............-}|                encrypted_data: raw bits 0x762-0x782.7 (33)
+  0x077|3b f5 9a 57 ee ba f2 5f dd 9d f1 f5 b1 1b 01 ba|;..W..._........|
+  0x078|0e bd b3                                       |...             |
+       |                                               |                |              [8]{}: record 0x783-0x7b0.7 (46)
+  0x078|         17                                    |   .            |                type: "application_data" (23) (valid) 0x783-0x783.7 (1)
+  0x078|            03 03                              |    ..          |                version: "tls1.2" (0x303) (valid) 0x784-0x785.7 (2)
+  0x078|                  00 29                        |      .)        |                length: 41 0x786-0x787.7 (2)
+  0x078|                        00 00 00 00 00 00 00 06|        ........|                encrypted_data: raw bits 0x788-0x7b0.7 (41)
+  0x079|96 50 96 ef 10 f4 be e9 a0 94 5f 07 be dc fd 50|.P........_....P|
+  *    |until 0x7b0.7 (end) (41)                       |                |
        |                                               |                |        server{}: 0x51b8-NA (0)
        |                                               |                |          ip: "74.125.228.227" 0x51b8-NA (0)
        |                                               |                |          port: "https" (443) (http protocol over TLS/SSL) 0x51b8-NA (0)
        |                                               |                |          has_start: true 0x51b8-NA (0)
        |                                               |                |          has_end: false 0x51b8-NA (0)
        |                                               |                |          skipped_bytes: 0 0x51b8-NA (0)
-       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          stream{}: (tls) 0x0-0x35b.7 (860)
-  0x000|16 03 03 00 5a 02 00 00 56 03 03 55 d0 e5 ff ab|....Z...V..U....|          stream: raw bits 0x0-0x35b.7 (860)
+       |                                               |                |            records[0:9]: 0x0-0x35b.7 (860)
-  *    |until 0x35b.7 (end) (860)                      |                |
+       |                                               |                |              [0]{}: record 0x0-0x5e.7 (95)
+  0x000|16                                             |.               |                type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |                version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 5a                                 |   .Z           |                length: 90 0x3-0x4.7 (2)
+       |                                               |                |                message{}: 0x5-0x5e.7 (90)
+  0x000|               02                              |     .          |                  type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 56                     |      ..V       |                  length: 86 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |                  version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |                  random{}: 0xb-0x2a.7 (32)
+  0x000|                                 55 d0 e5 ff   |           U... |                    gmt_unix_time: 1439753727 (2015-08-16T19:35:27Z) 0xb-0xe.7 (4)
+  0x000|                                             ab|               .|                    random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|64 a2 2f fb 48 67 a5 ad 7e 38 59 f0 b7 3b cb 35|d./.Hg..~8Y..;.5|
+  0x002|93 32 ff 40 5a e3 5d e2 db e2 dc               |.2.@Z.]....     |
+  0x002|                                 20            |                |                  session_id_length: 32 0x2b-0x2b.7 (1)
+  0x002|                                    6e 55 2a c2|            nU*.|                  session_id: raw bits 0x2c-0x4b.7 (32)
+  0x003|7e 89 b4 14 11 29 e5 e5 eb f0 2f 68 ca b6 16 f6|~....)..../h....|
+  0x004|ef 0a 82 f9 16 c8 53 f6 8d d5 1b 50            |......S....P    |
+  0x004|                                    c0 2b      |            .+  |                  cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" (0xc02b) 0x4c-0x4d.7 (2)
+  0x004|                                          00   |              . |                  compression_method: "null" (0x0) 0x4e-0x4e.7 (1)
+  0x004|                                             00|               .|                  extensions_length: 14 0x4f-0x50.7 (2)
+  0x005|0e                                             |.               |
+       |                                               |                |                  extensions[0:2]: 0x51-0x5e.7 (14)
+       |                                               |                |                    [0]{}: extension 0x51-0x55.7 (5)
+  0x005|   ff 01                                       | ..             |                      type: "renegotiation_info" (65281) 0x51-0x52.7 (2)
+  0x005|         00 01                                 |   ..           |                      length: 1 0x53-0x54.7 (2)
+  0x005|               00                              |     .          |                      data: raw bits 0x55-0x55.7 (1)
+       |                                               |                |                    [1]{}: extension 0x56-0x5e.7 (9)
+  0x005|                  00 10                        |      ..        |                      type: "application_layer_protocol_negotiation" (16) 0x56-0x57.7 (2)
+  0x005|                        00 05                  |        ..      |                      length: 5 0x58-0x59.7 (2)
+  0x005|                              00 03            |          ..    |                      serer_names_length: 3 0x5a-0x5b.7 (2)
+       |                                               |                |                      protocols[0:1]: 0x5c-0x5e.7 (3)
+       |                                               |                |                        [0]{}: protocol 0x5c-0x5e.7 (3)
+  0x005|                                    02         |            .   |                          length: 2 0x5c-0x5c.7 (1)
+  0x005|                                       68 32   |             h2 |                          name: "h2" 0x5d-0x5e.7 (2)
+       |                                               |                |              [1]{}: record 0x5f-0x64.7 (6)
+  0x005|                                             14|               .|                type: "change_cipher_spec" (20) (valid) 0x5f-0x5f.7 (1)
+  0x006|03 03                                          |..              |                version: "tls1.2" (0x303) (valid) 0x60-0x61.7 (2)
+  0x006|      00 01                                    |  ..            |                length: 1 0x62-0x63.7 (2)
+       |                                               |                |                message{}: 0x64-0x64.7 (1)
+  0x006|            01                                 |    .           |                  type: 1 0x64-0x64.7 (1)
+       |                                               |                |              [2]{}: record 0x65-0x91.7 (45)
+  0x006|               16                              |     .          |                type: "handshake" (22) (valid) 0x65-0x65.7 (1)
+  0x006|                  03 03                        |      ..        |                version: "tls1.2" (0x303) (valid) 0x66-0x67.7 (2)
+  0x006|                        00 28                  |        .(      |                length: 40 0x68-0x69.7 (2)
+  0x006|                              00 00 00 00 00 00|          ......|                encrypted_data: raw bits 0x6a-0x91.7 (40)
+  0x007|00 00 10 a0 e1 85 c9 7f a3 82 67 07 af 1a da bc|..........g.....|
+  *    |until 0x91.7 (40)                              |                |
+       |                                               |                |              [3]{}: record 0x92-0xc9.7 (56)
+  0x009|      17                                       |  .             |                type: "application_data" (23) (valid) 0x92-0x92.7 (1)
+  0x009|         03 03                                 |   ..           |                version: "tls1.2" (0x303) (valid) 0x93-0x94.7 (2)
+  0x009|               00 33                           |     .3         |                length: 51 0x95-0x96.7 (2)
+  0x009|                     00 00 00 00 00 00 00 01 84|       .........|                encrypted_data: raw bits 0x97-0xc9.7 (51)
+  0x00a|43 dc 31 8d ea 84 17 37 3d ee 7d 47 7d a0 24 3f|C.1....7=.}G}.$?|
+  *    |until 0xc9.7 (51)                              |                |
+       |                                               |                |              [4]{}: record 0xca-0xf3.7 (42)
+  0x00c|                              17               |          .     |                type: "application_data" (23) (valid) 0xca-0xca.7 (1)
+  0x00c|                                 03 03         |           ..   |                version: "tls1.2" (0x303) (valid) 0xcb-0xcc.7 (2)
+  0x00c|                                       00 25   |             .% |                length: 37 0xcd-0xce.7 (2)
+  0x00c|                                             00|               .|                encrypted_data: raw bits 0xcf-0xf3.7 (37)
+  0x00d|00 00 00 00 00 00 02 a8 2a 53 77 c7 0f 40 39 64|........*Sw..@9d|
+  *    |until 0xf3.7 (37)                              |                |
+       |                                               |                |              [5]{}: record 0xf4-0x119.7 (38)
+  0x00f|            17                                 |    .           |                type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00f|               03 03                           |     ..         |                version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00f|                     00 21                     |       .!       |                length: 33 0xf7-0xf8.7 (2)
+  0x00f|                           00 00 00 00 00 00 00|         .......|                encrypted_data: raw bits 0xf9-0x119.7 (33)
+  0x010|03 bd 10 a7 a4 4e 7d 28 b4 4a 55 a3 39 db 64 b3|.....N}(.JU.9.d.|
+  0x011|7a ae 3d e4 2e fc eb 8e 66 c5                  |z.=.....f.      |
+       |                                               |                |              [6]{}: record 0x11a-0x307.7 (494)
+  0x011|                              17               |          .     |                type: "application_data" (23) (valid) 0x11a-0x11a.7 (1)
+  0x011|                                 03 03         |           ..   |                version: "tls1.2" (0x303) (valid) 0x11b-0x11c.7 (2)
+  0x011|                                       01 e9   |             .. |                length: 489 0x11d-0x11e.7 (2)
+  0x011|                                             00|               .|                encrypted_data: raw bits 0x11f-0x307.7 (489)
+  0x012|00 00 00 00 00 00 04 cf 1d 4f e3 82 9a 07 84 9e|.........O......|
+  *    |until 0x307.7 (489)                            |                |
+       |                                               |                |              [7]{}: record 0x308-0x32d.7 (38)
+  0x030|                        17                     |        .       |                type: "application_data" (23) (valid) 0x308-0x308.7 (1)
+  0x030|                           03 03               |         ..     |                version: "tls1.2" (0x303) (valid) 0x309-0x30a.7 (2)
+  0x030|                                 00 21         |           .!   |                length: 33 0x30b-0x30c.7 (2)
+  0x030|                                       00 00 00|             ...|                encrypted_data: raw bits 0x30d-0x32d.7 (33)
+  0x031|00 00 00 00 05 d5 71 fb a3 87 9f 58 83 90 15 c7|......q....X....|
+  0x032|2d 65 52 df 40 13 ee cb 7f d6 30 c8 39 81      |-eR.@.....0.9.  |
+       |                                               |                |              [8]{}: record 0x32e-0x35b.7 (46)
+  0x032|                                          17   |              . |                type: "application_data" (23) (valid) 0x32e-0x32e.7 (1)
+  0x032|                                             03|               .|                version: "tls1.2" (0x303) (valid) 0x32f-0x330.7 (2)
+  0x033|03                                             |.               |
+  0x033|   00 29                                       | .)             |                length: 41 0x331-0x332.7 (2)
+  0x033|         00 00 00 00 00 00 00 06 a7 fa e5 cc 23|   ............#|                encrypted_data: raw bits 0x333-0x35b.7 (41)
+  0x034|d5 5d a4 0a 83 41 17 4a 1f 0d 92 01 5c 36 53 c7|.]...A.J....\6S.|
+  0x035|50 80 03 4c 1f a3 49 61 07 01 10 30|           |P..L..Ia...0|   |
        |                                               |                |      [1]{}: tcp_connection 0x51b8-NA (0)
        |                                               |                |        client{}: 0x51b8-NA (0)
        |                                               |                |          ip: "192.168.1.139" 0x51b8-NA (0)
@@ -5540,9 +5825,144 @@ $ fq -d pcapng dv many_interfaces.pcapng
        |                                               |                |          has_start: true 0x51b8-NA (0)
        |                                               |                |          has_end: false 0x51b8-NA (0)
        |                                               |                |          skipped_bytes: 0 0x51b8-NA (0)
-       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          stream{}: (tls) 0x0-0xd7.7 (216)
-  0x000|16 03 01 00 d3 01 00 00 cf 03 03 c0 a6 33 83 e1|.............3..|          stream: raw bits 0x0-0xd7.7 (216)
+       |                                               |                |            records[0:1]: 0x0-0xd7.7 (216)
-  *    |until 0xd7.7 (end) (216)                       |                |
+       |                                               |                |              [0]{}: record 0x0-0xd7.7 (216)
+  0x000|16                                             |.               |                type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |                version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 d3                                 |   ..           |                length: 211 0x3-0x4.7 (2)
+       |                                               |                |                message{}: 0x5-0xd7.7 (211)
+  0x000|               01                              |     .          |                  type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 cf                     |      ...       |                  length: 207 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |                  version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |                  random{}: 0xb-0x2a.7 (32)
+  0x000|                                 c0 a6 33 83   |           ..3. |                    gmt_unix_time: 3232117635 (2072-06-02T18:27:15Z) 0xb-0xe.7 (4)
+  0x000|                                             e1|               .|                    random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|1e ec 7c 8e da 3b 46 f9 0b 54 6a 61 43 e1 98 13|..|..;F..TjaC...|
+  0x002|80 6c e6 6f 14 ef ed 3a 16 04 09               |.l.o...:...     |
+  0x002|                                 00            |           .    |                  session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |                  session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 22      |            ."  |                  cipher_suits_length: 34 0x2c-0x2d.7 (2)
+       |                                               |                |                  cipher_suits[0:17]: 0x2e-0x4f.7 (34)
+  0x002|                                          c0 2b|              .+|                    [0]: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" (0xc02b) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|c0 2f                                          |./              |                    [1]: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" (0xc02f) cipher_suit 0x30-0x31.7 (2)
+  0x003|      00 9e                                    |  ..            |                    [2]: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" (0x9e) cipher_suit 0x32-0x33.7 (2)
+  0x003|            cc 14                              |    ..          |                    [3]: 0xcc14 cipher_suit 0x34-0x35.7 (2)
+  0x003|                  cc 13                        |      ..        |                    [4]: 0xcc13 cipher_suit 0x36-0x37.7 (2)
+  0x003|                        cc 15                  |        ..      |                    [5]: 0xcc15 cipher_suit 0x38-0x39.7 (2)
+  0x003|                              c0 0a            |          ..    |                    [6]: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" (0xc00a) cipher_suit 0x3a-0x3b.7 (2)
+  0x003|                                    c0 14      |            ..  |                    [7]: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" (0xc014) cipher_suit 0x3c-0x3d.7 (2)
+  0x003|                                          00 39|              .9|                    [8]: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA" (0x39) cipher_suit 0x3e-0x3f.7 (2)
+  0x004|c0 09                                          |..              |                    [9]: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" (0xc009) cipher_suit 0x40-0x41.7 (2)
+  0x004|      c0 13                                    |  ..            |                    [10]: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" (0xc013) cipher_suit 0x42-0x43.7 (2)
+  0x004|            00 33                              |    .3          |                    [11]: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" (0x33) cipher_suit 0x44-0x45.7 (2)
+  0x004|                  00 9c                        |      ..        |                    [12]: "TLS_RSA_WITH_AES_128_GCM_SHA256" (0x9c) cipher_suit 0x46-0x47.7 (2)
+  0x004|                        00 35                  |        .5      |                    [13]: "TLS_RSA_WITH_AES_256_CBC_SHA" (0x35) cipher_suit 0x48-0x49.7 (2)
+  0x004|                              00 2f            |          ./    |                    [14]: "TLS_RSA_WITH_AES_128_CBC_SHA" (0x2f) cipher_suit 0x4a-0x4b.7 (2)
+  0x004|                                    00 0a      |            ..  |                    [15]: "TLS_RSA_WITH_3DES_EDE_CBC_SHA" (0xa) cipher_suit 0x4c-0x4d.7 (2)
+  0x004|                                          00 ff|              ..|                    [16]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x4e-0x4f.7 (2)
+  0x005|01                                             |.               |                  compression_methods_length: 1 0x50-0x50.7 (1)
+       |                                               |                |                  compression_methods[0:1]: 0x51-0x51.7 (1)
+  0x005|   00                                          | .              |                    [0]: "null" (0x0) compression_method 0x51-0x51.7 (1)
+  0x005|      00 84                                    |  ..            |                  extensions_length: 132 0x52-0x53.7 (2)
+       |                                               |                |                  extensions[0:11]: 0x54-0xd7.7 (132)
+       |                                               |                |                    [0]{}: extension 0x54-0x6f.7 (28)
+  0x005|            00 00                              |    ..          |                      type: "server_name" (0) 0x54-0x55.7 (2)
+  0x005|                  00 18                        |      ..        |                      length: 24 0x56-0x57.7 (2)
+  0x005|                        00 16                  |        ..      |                      serer_names_length: 22 0x58-0x59.7 (2)
+       |                                               |                |                      server_names[0:1]: 0x5a-0x6f.7 (22)
+       |                                               |                |                        [0]{}: server_name 0x5a-0x6f.7 (22)
+  0x005|                              00               |          .     |                          type: 0 0x5a-0x5a.7 (1)
+  0x005|                                 00 13         |           ..   |                          length: 19 0x5b-0x5c.7 (2)
+  0x005|                                       63 6c 69|             cli|                          name: "clients6.google.com" 0x5d-0x6f.7 (19)
+  0x006|65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d|ents6.google.com|
+       |                                               |                |                    [1]{}: extension 0x70-0x73.7 (4)
+  0x007|00 17                                          |..              |                      type: "extended_master_secret" (23) 0x70-0x71.7 (2)
+  0x007|      00 00                                    |  ..            |                      length: 0 0x72-0x73.7 (2)
+       |                                               |                |                    [2]{}: extension 0x74-0x77.7 (4)
+  0x007|            00 23                              |    .#          |                      type: "session_ticket" (35) 0x74-0x75.7 (2)
+  0x007|                  00 00                        |      ..        |                      length: 0 0x76-0x77.7 (2)
+       |                                               |                |                    [3]{}: extension 0x78-0x91.7 (26)
+  0x007|                        00 0d                  |        ..      |                      type: "signature_algorithms" (13) 0x78-0x79.7 (2)
+  0x007|                              00 16            |          ..    |                      length: 22 0x7a-0x7b.7 (2)
+  0x007|                                    00 14      |            ..  |                      signature_algorithm_length: 20 0x7c-0x7d.7 (2)
+       |                                               |                |                      signature_algorithms[0:10]: 0x7e-0x91.7 (20)
+       |                                               |                |                        [0]{}: signature_algorithm 0x7e-0x7f.7 (2)
+  0x007|                                          06   |              . |                          hash: "sha512" (6) 0x7e-0x7e.7 (1)
+  0x007|                                             01|               .|                          signature: "rsa" (1) 0x7f-0x7f.7 (1)
+       |                                               |                |                        [1]{}: signature_algorithm 0x80-0x81.7 (2)
+  0x008|06                                             |.               |                          hash: "sha512" (6) 0x80-0x80.7 (1)
+  0x008|   03                                          | .              |                          signature: "ecdsa" (3) 0x81-0x81.7 (1)
+       |                                               |                |                        [2]{}: signature_algorithm 0x82-0x83.7 (2)
+  0x008|      05                                       |  .             |                          hash: "sha384" (5) 0x82-0x82.7 (1)
+  0x008|         01                                    |   .            |                          signature: "rsa" (1) 0x83-0x83.7 (1)
+       |                                               |                |                        [3]{}: signature_algorithm 0x84-0x85.7 (2)
+  0x008|            05                                 |    .           |                          hash: "sha384" (5) 0x84-0x84.7 (1)
+  0x008|               03                              |     .          |                          signature: "ecdsa" (3) 0x85-0x85.7 (1)
+       |                                               |                |                        [4]{}: signature_algorithm 0x86-0x87.7 (2)
+  0x008|                  04                           |      .         |                          hash: "sha256" (4) 0x86-0x86.7 (1)
+  0x008|                     01                        |       .        |                          signature: "rsa" (1) 0x87-0x87.7 (1)
+       |                                               |                |                        [5]{}: signature_algorithm 0x88-0x89.7 (2)
+  0x008|                        04                     |        .       |                          hash: "sha256" (4) 0x88-0x88.7 (1)
+  0x008|                           03                  |         .      |                          signature: "ecdsa" (3) 0x89-0x89.7 (1)
+       |                                               |                |                        [6]{}: signature_algorithm 0x8a-0x8b.7 (2)
+  0x008|                              03               |          .     |                          hash: "sha224" (3) 0x8a-0x8a.7 (1)
+  0x008|                                 01            |           .    |                          signature: "rsa" (1) 0x8b-0x8b.7 (1)
+       |                                               |                |                        [7]{}: signature_algorithm 0x8c-0x8d.7 (2)
+  0x008|                                    03         |            .   |                          hash: "sha224" (3) 0x8c-0x8c.7 (1)
+  0x008|                                       03      |             .  |                          signature: "ecdsa" (3) 0x8d-0x8d.7 (1)
+       |                                               |                |                        [8]{}: signature_algorithm 0x8e-0x8f.7 (2)
+  0x008|                                          02   |              . |                          hash: "sha1" (2) 0x8e-0x8e.7 (1)
+  0x008|                                             01|               .|                          signature: "rsa" (1) 0x8f-0x8f.7 (1)
+       |                                               |                |                        [9]{}: signature_algorithm 0x90-0x91.7 (2)
+  0x009|02                                             |.               |                          hash: "sha1" (2) 0x90-0x90.7 (1)
+  0x009|   03                                          | .              |                          signature: "ecdsa" (3) 0x91-0x91.7 (1)
+       |                                               |                |                    [4]{}: extension 0x92-0x9a.7 (9)
+  0x009|      00 05                                    |  ..            |                      type: "status_request" (5) 0x92-0x93.7 (2)
+  0x009|            00 05                              |    ..          |                      length: 5 0x94-0x95.7 (2)
+  0x009|                  01 00 00 00 00               |      .....     |                      data: raw bits 0x96-0x9a.7 (5)
+       |                                               |                |                    [5]{}: extension 0x9b-0x9e.7 (4)
+  0x009|                                 33 74         |           3t   |                      type: 13172 0x9b-0x9c.7 (2)
+  0x009|                                       00 00   |             .. |                      length: 0 0x9d-0x9e.7 (2)
+       |                                               |                |                    [6]{}: extension 0x9f-0xa2.7 (4)
+  0x009|                                             00|               .|                      type: "signed_certificate_timestamp" (18) 0x9f-0xa0.7 (2)
+  0x00a|12                                             |.               |
+  0x00a|   00 00                                       | ..             |                      length: 0 0xa1-0xa2.7 (2)
+       |                                               |                |                    [7]{}: extension 0xa3-0xc3.7 (33)
+  0x00a|         00 10                                 |   ..           |                      type: "application_layer_protocol_negotiation" (16) 0xa3-0xa4.7 (2)
+  0x00a|               00 1d                           |     ..         |                      length: 29 0xa5-0xa6.7 (2)
+  0x00a|                     00 1b                     |       ..       |                      serer_names_length: 27 0xa7-0xa8.7 (2)
+       |                                               |                |                      protocols[0:4]: 0xa9-0xc3.7 (27)
+       |                                               |                |                        [0]{}: protocol 0xa9-0xb1.7 (9)
+  0x00a|                           08                  |         .      |                          length: 8 0xa9-0xa9.7 (1)
+  0x00a|                              68 74 74 70 2f 31|          http/1|                          name: "http/1.1" 0xaa-0xb1.7 (8)
+  0x00b|2e 31                                          |.1              |
+       |                                               |                |                        [1]{}: protocol 0xb2-0xba.7 (9)
+  0x00b|      08                                       |  .             |                          length: 8 0xb2-0xb2.7 (1)
+  0x00b|         73 70 64 79 2f 33 2e 31               |   spdy/3.1     |                          name: "spdy/3.1" 0xb3-0xba.7 (8)
+       |                                               |                |                        [2]{}: protocol 0xbb-0xc0.7 (6)
+  0x00b|                                 05            |           .    |                          length: 5 0xbb-0xbb.7 (1)
+  0x00b|                                    68 32 2d 31|            h2-1|                          name: "h2-14" 0xbc-0xc0.7 (5)
+  0x00c|34                                             |4               |
+       |                                               |                |                        [3]{}: protocol 0xc1-0xc3.7 (3)
+  0x00c|   02                                          | .              |                          length: 2 0xc1-0xc1.7 (1)
+  0x00c|      68 32                                    |  h2            |                          name: "h2" 0xc2-0xc3.7 (2)
+       |                                               |                |                    [8]{}: extension 0xc4-0xc7.7 (4)
+  0x00c|            75 50                              |    uP          |                      type: 30032 0xc4-0xc5.7 (2)
+  0x00c|                  00 00                        |      ..        |                      length: 0 0xc6-0xc7.7 (2)
+       |                                               |                |                    [9]{}: extension 0xc8-0xcd.7 (6)
+  0x00c|                        00 0b                  |        ..      |                      type: "ec_point_formats" (11) 0xc8-0xc9.7 (2)
+  0x00c|                              00 02            |          ..    |                      length: 2 0xca-0xcb.7 (2)
+  0x00c|                                    01         |            .   |                      ex_points_format_length: 1 0xcc-0xcc.7 (1)
+       |                                               |                |                      ex_points_formats[0:1]: 0xcd-0xcd.7 (1)
+  0x00c|                                       00      |             .  |                        [0]: 0x0 ex_points_format 0xcd-0xcd.7 (1)
+       |                                               |                |                    [10]{}: extension 0xce-0xd7.7 (10)
+  0x00c|                                          00 0a|              ..|                      type: "supported_groups" (10) 0xce-0xcf.7 (2)
+  0x00d|00 06                                          |..              |                      length: 6 0xd0-0xd1.7 (2)
+  0x00d|      00 04                                    |  ..            |                      supported_group_length: 4 0xd2-0xd3.7 (2)
+       |                                               |                |                      supported_groups[0:2]: 0xd4-0xd7.7 (4)
+  0x00d|            00 17                              |    ..          |                        [0]: 0x17 supported_group 0xd4-0xd5.7 (2)
+  0x00d|                  00 18|                       |      ..|       |                        [1]: 0x18 supported_group 0xd6-0xd7.7 (2)
        |                                               |                |        server{}: 0x51b8-NA (0)
        |                                               |                |          ip: "74.125.228.227" 0x51b8-NA (0)
        |                                               |                |          port: "https" (443) (http protocol over TLS/SSL) 0x51b8-NA (0)

format/tls/README.md

@@ -0,0 +1,18 @@
+## Dev notes
+
+TLS deflate compression seems to actually be zlib, so zlib header + deflate. Also each record is compressed with a flush (trailing 0x00 0x00 0xff 0xff) so that they can be uncompressed individually.
+
+https://lekensteyn.nl/files/wireshark-ssl-tls-decryption-secrets-sharkfest18eu.pdf
+
+```
+tshark -x -V -o tls.keylog_file:file.keylog -r file.pcap
+```
+
+Wireshark gui has TLS debug option to write key/iv etc
+
+```
+tcpdump -i en0 -w file.pcap
+SSLKEYLOGFILE=file.keylog /path/to/sslkey-able/curl --http1.1 -tlsv1.2 --tls-max 1.2 -v https://host/path
+```
+
+TLS 1.3 dumps https://gitlab.com/wireshark/wireshark/-/issues/12779

format/tls/alerts.go

@@ -0,0 +1,85 @@
+package tls
+
+import "github.com/wader/fq/pkg/scalar"
+
+const (
+	alertLevelWarning = 1
+	alertLevelError   = 2
+)
+
+var alertLevelNames = scalar.UintMapSymStr{
+	alertLevelWarning: "warning",
+	alertLevelError:   "error",
+}
+
+const (
+	alertCloseNotify                  = 0
+	alertUnexpectedMessage            = 10
+	alertBadRecordMAC                 = 20
+	alertDecryptionFailed             = 21
+	alertRecordOverflow               = 22
+	alertDecompressionFailure         = 30
+	alertHandshakeFailure             = 40
+	alertBadCertificate               = 42
+	alertUnsupportedCertificate       = 43
+	alertCertificateRevoked           = 44
+	alertCertificateExpired           = 45
+	alertCertificateUnknown           = 46
+	alertIllegalParameter             = 47
+	alertUnknownCA                    = 48
+	alertAccessDenied                 = 49
+	alertDecodeError                  = 50
+	alertDecryptError                 = 51
+	alertExportRestriction            = 60
+	alertProtocolVersion              = 70
+	alertInsufficientSecurity         = 71
+	alertInternalError                = 80
+	alertInappropriateFallback        = 86
+	alertUserCanceled                 = 90
+	alertNoRenegotiation              = 100
+	alertMissingExtension             = 109
+	alertUnsupportedExtension         = 110
+	alertCertificateUnobtainable      = 111
+	alertUnrecognizedName             = 112
+	alertBadCertificateStatusResponse = 113
+	alertBadCertificateHashValue      = 114
+	alertUnknownPSKIdentity           = 115
+	alertCertificateRequired          = 116
+	alertNoApplicationProtocol        = 120
+)
+
+var alertNames = scalar.UintMapSymStr{
+	alertCloseNotify:                  "close_notify",
+	alertUnexpectedMessage:            "unexpected_message",
+	alertBadRecordMAC:                 "bad_record_mac",
+	alertDecryptionFailed:             "decryption_failed",
+	alertRecordOverflow:               "record_overflow",
+	alertDecompressionFailure:         "decompression_failure",
+	alertHandshakeFailure:             "handshake_failure",
+	alertBadCertificate:               "bad_certificate",
+	alertUnsupportedCertificate:       "unsupported_certificate",
+	alertCertificateRevoked:           "revoked_certificate",
+	alertCertificateExpired:           "expired_certificate",
+	alertCertificateUnknown:           "unknown_certificate",
+	alertIllegalParameter:             "illegal_parameter",
+	alertUnknownCA:                    "unknown_certificate_authority",
+	alertAccessDenied:                 "access_denied",
+	alertDecodeError:                  "error_decoding_message",
+	alertDecryptError:                 "error_decrypting_message",
+	alertExportRestriction:            "export_restriction",
+	alertProtocolVersion:              "protocol_version_not_supported",
+	alertInsufficientSecurity:         "insufficient_security_level",
+	alertInternalError:                "internal_error",
+	alertInappropriateFallback:        "inappropriate_fallback",
+	alertUserCanceled:                 "user_canceled",
+	alertNoRenegotiation:              "no_renegotiation",
+	alertMissingExtension:             "missing_extension",
+	alertUnsupportedExtension:         "unsupported_extension",
+	alertCertificateUnobtainable:      "certificate_unobtainable",
+	alertUnrecognizedName:             "unrecognized_name",
+	alertBadCertificateStatusResponse: "bad_certificate_status_response",
+	alertBadCertificateHashValue:      "bad_certificate_hash_value",
+	alertUnknownPSKIdentity:           "unknown_PSK_identity",
+	alertCertificateRequired:          "certificate_required",
+	alertNoApplicationProtocol:        "no_application_protocol",
+}

format/tls/ciphersuites/ciphersuites.go

@@ -0,0 +1,3 @@
+package ciphersuites
+
+//go:generate sh -c "cat tls-parameters-4.csv other.csv | ./ciphersuites.jq | gofmt -s > ciphersuites_gen.go"

format/tls/ciphersuites/ciphersuites.jq

@@ -0,0 +1,85 @@
+#!/usr/bin/env fq -d csv -r -f
+#
+# cat tls-parameters-4.csv other.csv | ./ciphersuites.jq  | gofmt > ciphersuits.go
+#
+# csv from:
+# https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml
+#
+# Example line:
+# "0xC0,0xA0",TLS_RSA_WITH_AES_128_CCM_8,Y,N,[RFC6655]
+#
+
+def from_suitname:
+  ( . as $name
+  | ( capture(`^(?<proto>[A-Z0-9]+)_(?<ka>\w+)_WITH_(?<cipher>\w+)_(?<hash>NULL|SHA.*|MD.*|GOSTR3411|IMIT)$`)
+    //
+      ( capture(`^(?<proto>[A-Z0-9]+)`)
+      | .ka = "UNKNOWN"
+      | .cipher = "UNKNOWN"
+      | .hash = "UNKNOWN"
+      | .ka = "UNKNOWN"
+      )
+    )
+  # special case to get valid cipher const name
+  | with_entries(.value |= if test("^\\d") then "_"+. end)
+  | .name = $name
+  );
+
+def from_params:
+  ( .[1:]
+  | map(
+    ( select(.[0])
+    | select(.[1] | test("unassigned|reserved";"i") | not))
+    | { number: (.[0] | split(",") | map(.[2:]) | join("") | "0x" + ascii_downcase)
+      }
+    + (.[1] | from_suitname)
+    )
+  );
+
+def prefix_special($name):
+  if . == "NULL" or . == "UNKNOWN" then "\(.)_\($name)" end;
+
+def prefix_specials($name):
+  .[] |= prefix_special($name);
+
+def enum($name):
+  ( "type \($name) int"
+  , ""
+  , "const ("
+  , (.[0] | "  \(.) \($name) = iota")
+  , (.[1:][] | "  \(.)")
+  , ")"
+  );
+
+( from_params as $params
+| ($params | map(.proto) | unique | prefix_specials("Protocol")) as $protos
+| ($params | map(.ka) | unique | prefix_specials("KeyAgreement")) as $kas
+| ($params | map(.cipher) | unique | prefix_specials("Cipher")) as $ciphers
+| ($params | map(.hash) | unique | prefix_specials("Hash")) as $hashs
+| "// Package ciphersuites defines TLS and SSL cipher suit properties"
+, "// generated by ciphersuites.jq"
+, "//"
+, "// Ignored lint warnings to keep same names as in spec"
+, "//nolint:revive"
+, "package ciphersuites"
+, ($protos | enum("Protocol"))
+, ($kas | enum("KeyAgreement"))
+, ($ciphers | enum("Cipher"))
+, ($hashs | enum("Hash"))
+, ( "const ("
+  , ($params[] | "  \(.name) = \(.number)")
+  , ")"
+  )
+, "type Suit struct {"
+, "  Name         string"
+, "  Protocol     Protocol"
+, "  KeyAgreement KeyAgreement"
+, "  Cipher       Cipher"
+, "  Hash         Hash"
+, "}"
+, ( "var Suits = map[int]Suit{"
+  , ( $params[] | "\(.name): {Name: \"\(.name)\", Protocol: \(.proto | prefix_special("Protocol")), KeyAgreement: \(.ka | prefix_special("KeyAgreement")), Cipher: \(.cipher | prefix_special("Cipher")), Hash: \(.hash | prefix_special("Hash"))},")
+  , "}"
+  )
+)
+

format/tls/ciphersuites/ciphersuites_gen.go

@@ -0,0 +1,851 @@
+// Package ciphersuites defines TLS and SSL cipher suit properties
+// generated by ciphersuites.jq
+//
+// Ignored lint warnings to keep same names as in spec
+//
+//nolint:revive
+package ciphersuites
+
+type Protocol int
+
+const (
+	SSL Protocol = iota
+	TLS
+)
+
+type KeyAgreement int
+
+const (
+	DHE_DSS KeyAgreement = iota
+	DHE_DSS_EXPORT
+	DHE_PSK
+	DHE_RSA
+	DHE_RSA_EXPORT
+	DH_DSS
+	DH_DSS_EXPORT
+	DH_RSA
+	DH_RSA_EXPORT
+	DH_anon
+	DH_anon_EXPORT
+	ECCPWD
+	ECDHE_ECDSA
+	ECDHE_PSK
+	ECDHE_RSA
+	ECDH_ECDSA
+	ECDH_RSA
+	ECDH_anon
+	GOSTR341001
+	GOSTR341094
+	GOSTR341112_256
+	KRB5
+	KRB5_EXPORT
+	NULL_KeyAgreement
+	PSK
+	RSA
+	RSA_EXPORT
+	RSA_FIPS
+	RSA_PSK
+	SRP_SHA
+	SRP_SHA_DSS
+	SRP_SHA_RSA
+	UNKNOWN_KeyAgreement
+)
+
+type Cipher int
+
+const (
+	AES_128_CBC Cipher = iota
+	AES_128_CCM
+	AES_128_CCM_8
+	AES_128_GCM
+	AES_256_CBC
+	AES_256_CCM
+	AES_256_GCM
+	ARIA_128_CBC
+	ARIA_128_GCM
+	ARIA_256_CBC
+	ARIA_256_GCM
+	CAMELLIA_128_CBC
+	CAMELLIA_128_GCM
+	CAMELLIA_256_CBC
+	CAMELLIA_256_GCM
+	CHACHA20_POLY1305
+	DES40_CBC
+	DES_CBC
+	DES_CBC_40
+	IDEA_CBC
+	NULL_Cipher
+	RC2_CBC_40
+	RC4_128
+	RC4_40
+	SEED_CBC
+	UNKNOWN_Cipher
+	_28147_CNT
+	_3DES_EDE_CBC
+)
+
+type Hash int
+
+const (
+	GOSTR3411 Hash = iota
+	IMIT
+	MD5
+	NULL_Hash
+	SHA
+	SHA256
+	SHA384
+	UNKNOWN_Hash
+)
+const (
+	TLS_NULL_WITH_NULL_NULL                       = 0x0000
+	TLS_RSA_WITH_NULL_MD5                         = 0x0001
+	TLS_RSA_WITH_NULL_SHA                         = 0x0002
+	TLS_RSA_EXPORT_WITH_RC4_40_MD5                = 0x0003
+	TLS_RSA_WITH_RC4_128_MD5                      = 0x0004
+	TLS_RSA_WITH_RC4_128_SHA                      = 0x0005
+	TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5            = 0x0006
+	TLS_RSA_WITH_IDEA_CBC_SHA                     = 0x0007
+	TLS_RSA_EXPORT_WITH_DES40_CBC_SHA             = 0x0008
+	TLS_RSA_WITH_DES_CBC_SHA                      = 0x0009
+	TLS_RSA_WITH_3DES_EDE_CBC_SHA                 = 0x000a
+	TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA          = 0x000b
+	TLS_DH_DSS_WITH_DES_CBC_SHA                   = 0x000c
+	TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA              = 0x000d
+	TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA          = 0x000e
+	TLS_DH_RSA_WITH_DES_CBC_SHA                   = 0x000f
+	TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA              = 0x0010
+	TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA         = 0x0011
+	TLS_DHE_DSS_WITH_DES_CBC_SHA                  = 0x0012
+	TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA             = 0x0013
+	TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA         = 0x0014
+	TLS_DHE_RSA_WITH_DES_CBC_SHA                  = 0x0015
+	TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA             = 0x0016
+	TLS_DH_anon_EXPORT_WITH_RC4_40_MD5            = 0x0017
+	TLS_DH_anon_WITH_RC4_128_MD5                  = 0x0018
+	TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA         = 0x0019
+	TLS_DH_anon_WITH_DES_CBC_SHA                  = 0x001a
+	TLS_DH_anon_WITH_3DES_EDE_CBC_SHA             = 0x001b
+	TLS_KRB5_WITH_DES_CBC_SHA                     = 0x001e
+	TLS_KRB5_WITH_3DES_EDE_CBC_SHA                = 0x001f
+	TLS_KRB5_WITH_RC4_128_SHA                     = 0x0020
+	TLS_KRB5_WITH_IDEA_CBC_SHA                    = 0x0021
+	TLS_KRB5_WITH_DES_CBC_MD5                     = 0x0022
+	TLS_KRB5_WITH_3DES_EDE_CBC_MD5                = 0x0023
+	TLS_KRB5_WITH_RC4_128_MD5                     = 0x0024
+	TLS_KRB5_WITH_IDEA_CBC_MD5                    = 0x0025
+	TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA           = 0x0026
+	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA           = 0x0027
+	TLS_KRB5_EXPORT_WITH_RC4_40_SHA               = 0x0028
+	TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5           = 0x0029
+	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5           = 0x002a
+	TLS_KRB5_EXPORT_WITH_RC4_40_MD5               = 0x002b
+	TLS_PSK_WITH_NULL_SHA                         = 0x002c
+	TLS_DHE_PSK_WITH_NULL_SHA                     = 0x002d
+	TLS_RSA_PSK_WITH_NULL_SHA                     = 0x002e
+	TLS_RSA_WITH_AES_128_CBC_SHA                  = 0x002f
+	TLS_DH_DSS_WITH_AES_128_CBC_SHA               = 0x0030
+	TLS_DH_RSA_WITH_AES_128_CBC_SHA               = 0x0031
+	TLS_DHE_DSS_WITH_AES_128_CBC_SHA              = 0x0032
+	TLS_DHE_RSA_WITH_AES_128_CBC_SHA              = 0x0033
+	TLS_DH_anon_WITH_AES_128_CBC_SHA              = 0x0034
+	TLS_RSA_WITH_AES_256_CBC_SHA                  = 0x0035
+	TLS_DH_DSS_WITH_AES_256_CBC_SHA               = 0x0036
+	TLS_DH_RSA_WITH_AES_256_CBC_SHA               = 0x0037
+	TLS_DHE_DSS_WITH_AES_256_CBC_SHA              = 0x0038
+	TLS_DHE_RSA_WITH_AES_256_CBC_SHA              = 0x0039
+	TLS_DH_anon_WITH_AES_256_CBC_SHA              = 0x003a
+	TLS_RSA_WITH_NULL_SHA256                      = 0x003b
+	TLS_RSA_WITH_AES_128_CBC_SHA256               = 0x003c
+	TLS_RSA_WITH_AES_256_CBC_SHA256               = 0x003d
+	TLS_DH_DSS_WITH_AES_128_CBC_SHA256            = 0x003e
+	TLS_DH_RSA_WITH_AES_128_CBC_SHA256            = 0x003f
+	TLS_DHE_DSS_WITH_AES_128_CBC_SHA256           = 0x0040
+	TLS_RSA_WITH_CAMELLIA_128_CBC_SHA             = 0x0041
+	TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA          = 0x0042
+	TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA          = 0x0043
+	TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA         = 0x0044
+	TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA         = 0x0045
+	TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA         = 0x0046
+	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256           = 0x0067
+	TLS_DH_DSS_WITH_AES_256_CBC_SHA256            = 0x0068
+	TLS_DH_RSA_WITH_AES_256_CBC_SHA256            = 0x0069
+	TLS_DHE_DSS_WITH_AES_256_CBC_SHA256           = 0x006a
+	TLS_DHE_RSA_WITH_AES_256_CBC_SHA256           = 0x006b
+	TLS_DH_anon_WITH_AES_128_CBC_SHA256           = 0x006c
+	TLS_DH_anon_WITH_AES_256_CBC_SHA256           = 0x006d
+	TLS_RSA_WITH_CAMELLIA_256_CBC_SHA             = 0x0084
+	TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA          = 0x0085
+	TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA          = 0x0086
+	TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA         = 0x0087
+	TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA         = 0x0088
+	TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA         = 0x0089
+	TLS_PSK_WITH_RC4_128_SHA                      = 0x008a
+	TLS_PSK_WITH_3DES_EDE_CBC_SHA                 = 0x008b
+	TLS_PSK_WITH_AES_128_CBC_SHA                  = 0x008c
+	TLS_PSK_WITH_AES_256_CBC_SHA                  = 0x008d
+	TLS_DHE_PSK_WITH_RC4_128_SHA                  = 0x008e
+	TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA             = 0x008f
+	TLS_DHE_PSK_WITH_AES_128_CBC_SHA              = 0x0090
+	TLS_DHE_PSK_WITH_AES_256_CBC_SHA              = 0x0091
+	TLS_RSA_PSK_WITH_RC4_128_SHA                  = 0x0092
+	TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA             = 0x0093
+	TLS_RSA_PSK_WITH_AES_128_CBC_SHA              = 0x0094
+	TLS_RSA_PSK_WITH_AES_256_CBC_SHA              = 0x0095
+	TLS_RSA_WITH_SEED_CBC_SHA                     = 0x0096
+	TLS_DH_DSS_WITH_SEED_CBC_SHA                  = 0x0097
+	TLS_DH_RSA_WITH_SEED_CBC_SHA                  = 0x0098
+	TLS_DHE_DSS_WITH_SEED_CBC_SHA                 = 0x0099
+	TLS_DHE_RSA_WITH_SEED_CBC_SHA                 = 0x009a
+	TLS_DH_anon_WITH_SEED_CBC_SHA                 = 0x009b
+	TLS_RSA_WITH_AES_128_GCM_SHA256               = 0x009c
+	TLS_RSA_WITH_AES_256_GCM_SHA384               = 0x009d
+	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256           = 0x009e
+	TLS_DHE_RSA_WITH_AES_256_GCM_SHA384           = 0x009f
+	TLS_DH_RSA_WITH_AES_128_GCM_SHA256            = 0x00a0
+	TLS_DH_RSA_WITH_AES_256_GCM_SHA384            = 0x00a1
+	TLS_DHE_DSS_WITH_AES_128_GCM_SHA256           = 0x00a2
+	TLS_DHE_DSS_WITH_AES_256_GCM_SHA384           = 0x00a3
+	TLS_DH_DSS_WITH_AES_128_GCM_SHA256            = 0x00a4
+	TLS_DH_DSS_WITH_AES_256_GCM_SHA384            = 0x00a5
+	TLS_DH_anon_WITH_AES_128_GCM_SHA256           = 0x00a6
+	TLS_DH_anon_WITH_AES_256_GCM_SHA384           = 0x00a7
+	TLS_PSK_WITH_AES_128_GCM_SHA256               = 0x00a8
+	TLS_PSK_WITH_AES_256_GCM_SHA384               = 0x00a9
+	TLS_DHE_PSK_WITH_AES_128_GCM_SHA256           = 0x00aa
+	TLS_DHE_PSK_WITH_AES_256_GCM_SHA384           = 0x00ab
+	TLS_RSA_PSK_WITH_AES_128_GCM_SHA256           = 0x00ac
+	TLS_RSA_PSK_WITH_AES_256_GCM_SHA384           = 0x00ad
+	TLS_PSK_WITH_AES_128_CBC_SHA256               = 0x00ae
+	TLS_PSK_WITH_AES_256_CBC_SHA384               = 0x00af
+	TLS_PSK_WITH_NULL_SHA256                      = 0x00b0
+	TLS_PSK_WITH_NULL_SHA384                      = 0x00b1
+	TLS_DHE_PSK_WITH_AES_128_CBC_SHA256           = 0x00b2
+	TLS_DHE_PSK_WITH_AES_256_CBC_SHA384           = 0x00b3
+	TLS_DHE_PSK_WITH_NULL_SHA256                  = 0x00b4
+	TLS_DHE_PSK_WITH_NULL_SHA384                  = 0x00b5
+	TLS_RSA_PSK_WITH_AES_128_CBC_SHA256           = 0x00b6
+	TLS_RSA_PSK_WITH_AES_256_CBC_SHA384           = 0x00b7
+	TLS_RSA_PSK_WITH_NULL_SHA256                  = 0x00b8
+	TLS_RSA_PSK_WITH_NULL_SHA384                  = 0x00b9
+	TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256          = 0x00ba
+	TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256       = 0x00bb
+	TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256       = 0x00bc
+	TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256      = 0x00bd
+	TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256      = 0x00be
+	TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256      = 0x00bf
+	TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256          = 0x00c0
+	TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256       = 0x00c1
+	TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256       = 0x00c2
+	TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256      = 0x00c3
+	TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256      = 0x00c4
+	TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256      = 0x00c5
+	TLS_SM4_GCM_SM3                               = 0x00c6
+	TLS_SM4_CCM_SM3                               = 0x00c7
+	TLS_EMPTY_RENEGOTIATION_INFO_SCSV             = 0x00ff
+	TLS_AES_128_GCM_SHA256                        = 0x1301
+	TLS_AES_256_GCM_SHA384                        = 0x1302
+	TLS_CHACHA20_POLY1305_SHA256                  = 0x1303
+	TLS_AES_128_CCM_SHA256                        = 0x1304
+	TLS_AES_128_CCM_8_SHA256                      = 0x1305
+	TLS_AEGIS_256_SHA384                          = 0x1306
+	TLS_AEGIS_128L_SHA256                         = 0x1307
+	TLS_FALLBACK_SCSV                             = 0x5600
+	TLS_ECDH_ECDSA_WITH_NULL_SHA                  = 0xc001
+	TLS_ECDH_ECDSA_WITH_RC4_128_SHA               = 0xc002
+	TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA          = 0xc003
+	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA           = 0xc004
+	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA           = 0xc005
+	TLS_ECDHE_ECDSA_WITH_NULL_SHA                 = 0xc006
+	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA              = 0xc007
+	TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA         = 0xc008
+	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA          = 0xc009
+	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          = 0xc00a
+	TLS_ECDH_RSA_WITH_NULL_SHA                    = 0xc00b
+	TLS_ECDH_RSA_WITH_RC4_128_SHA                 = 0xc00c
+	TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA            = 0xc00d
+	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA             = 0xc00e
+	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA             = 0xc00f
+	TLS_ECDHE_RSA_WITH_NULL_SHA                   = 0xc010
+	TLS_ECDHE_RSA_WITH_RC4_128_SHA                = 0xc011
+	TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA           = 0xc012
+	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA            = 0xc013
+	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA            = 0xc014
+	TLS_ECDH_anon_WITH_NULL_SHA                   = 0xc015
+	TLS_ECDH_anon_WITH_RC4_128_SHA                = 0xc016
+	TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA           = 0xc017
+	TLS_ECDH_anon_WITH_AES_128_CBC_SHA            = 0xc018
+	TLS_ECDH_anon_WITH_AES_256_CBC_SHA            = 0xc019
+	TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA             = 0xc01a
+	TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA         = 0xc01b
+	TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA         = 0xc01c
+	TLS_SRP_SHA_WITH_AES_128_CBC_SHA              = 0xc01d
+	TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA          = 0xc01e
+	TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA          = 0xc01f
+	TLS_SRP_SHA_WITH_AES_256_CBC_SHA              = 0xc020
+	TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA          = 0xc021
+	TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA          = 0xc022
+	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256       = 0xc023
+	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384       = 0xc024
+	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256        = 0xc025
+	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384        = 0xc026
+	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256         = 0xc027
+	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384         = 0xc028
+	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256          = 0xc029
+	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384          = 0xc02a
+	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       = 0xc02b
+	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       = 0xc02c
+	TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256        = 0xc02d
+	TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384        = 0xc02e
+	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         = 0xc02f
+	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         = 0xc030
+	TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256          = 0xc031
+	TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384          = 0xc032
+	TLS_ECDHE_PSK_WITH_RC4_128_SHA                = 0xc033
+	TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA           = 0xc034
+	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA            = 0xc035
+	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA            = 0xc036
+	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256         = 0xc037
+	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384         = 0xc038
+	TLS_ECDHE_PSK_WITH_NULL_SHA                   = 0xc039
+	TLS_ECDHE_PSK_WITH_NULL_SHA256                = 0xc03a
+	TLS_ECDHE_PSK_WITH_NULL_SHA384                = 0xc03b
+	TLS_RSA_WITH_ARIA_128_CBC_SHA256              = 0xc03c
+	TLS_RSA_WITH_ARIA_256_CBC_SHA384              = 0xc03d
+	TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256           = 0xc03e
+	TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384           = 0xc03f
+	TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256           = 0xc040
+	TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384           = 0xc041
+	TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256          = 0xc042
+	TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384          = 0xc043
+	TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256          = 0xc044
+	TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384          = 0xc045
+	TLS_DH_anon_WITH_ARIA_128_CBC_SHA256          = 0xc046
+	TLS_DH_anon_WITH_ARIA_256_CBC_SHA384          = 0xc047
+	TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256      = 0xc048
+	TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384      = 0xc049
+	TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256       = 0xc04a
+	TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384       = 0xc04b
+	TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256        = 0xc04c
+	TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384        = 0xc04d
+	TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256         = 0xc04e
+	TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384         = 0xc04f
+	TLS_RSA_WITH_ARIA_128_GCM_SHA256              = 0xc050
+	TLS_RSA_WITH_ARIA_256_GCM_SHA384              = 0xc051
+	TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256          = 0xc052
+	TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384          = 0xc053
+	TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256           = 0xc054
+	TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384           = 0xc055
+	TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256          = 0xc056
+	TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384          = 0xc057
+	TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256           = 0xc058
+	TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384           = 0xc059
+	TLS_DH_anon_WITH_ARIA_128_GCM_SHA256          = 0xc05a
+	TLS_DH_anon_WITH_ARIA_256_GCM_SHA384          = 0xc05b
+	TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256      = 0xc05c
+	TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384      = 0xc05d
+	TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256       = 0xc05e
+	TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384       = 0xc05f
+	TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256        = 0xc060
+	TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384        = 0xc061
+	TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256         = 0xc062
+	TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384         = 0xc063
+	TLS_PSK_WITH_ARIA_128_CBC_SHA256              = 0xc064
+	TLS_PSK_WITH_ARIA_256_CBC_SHA384              = 0xc065
+	TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256          = 0xc066
+	TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384          = 0xc067
+	TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256          = 0xc068
+	TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384          = 0xc069
+	TLS_PSK_WITH_ARIA_128_GCM_SHA256              = 0xc06a
+	TLS_PSK_WITH_ARIA_256_GCM_SHA384              = 0xc06b
+	TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256          = 0xc06c
+	TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384          = 0xc06d
+	TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256          = 0xc06e
+	TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384          = 0xc06f
+	TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256        = 0xc070
+	TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384        = 0xc071
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256  = 0xc072
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384  = 0xc073
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256   = 0xc074
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384   = 0xc075
+	TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256    = 0xc076
+	TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384    = 0xc077
+	TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256     = 0xc078
+	TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384     = 0xc079
+	TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256          = 0xc07a
+	TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384          = 0xc07b
+	TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256      = 0xc07c
+	TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384      = 0xc07d
+	TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256       = 0xc07e
+	TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384       = 0xc07f
+	TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256      = 0xc080
+	TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384      = 0xc081
+	TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256       = 0xc082
+	TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384       = 0xc083
+	TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256      = 0xc084
+	TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384      = 0xc085
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256  = 0xc086
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384  = 0xc087
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256   = 0xc088
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384   = 0xc089
+	TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256    = 0xc08a
+	TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384    = 0xc08b
+	TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256     = 0xc08c
+	TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384     = 0xc08d
+	TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256          = 0xc08e
+	TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384          = 0xc08f
+	TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256      = 0xc090
+	TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384      = 0xc091
+	TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256      = 0xc092
+	TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384      = 0xc093
+	TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256          = 0xc094
+	TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384          = 0xc095
+	TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256      = 0xc096
+	TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384      = 0xc097
+	TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256      = 0xc098
+	TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384      = 0xc099
+	TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256    = 0xc09a
+	TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384    = 0xc09b
+	TLS_RSA_WITH_AES_128_CCM                      = 0xc09c
+	TLS_RSA_WITH_AES_256_CCM                      = 0xc09d
+	TLS_DHE_RSA_WITH_AES_128_CCM                  = 0xc09e
+	TLS_DHE_RSA_WITH_AES_256_CCM                  = 0xc09f
+	TLS_RSA_WITH_AES_128_CCM_8                    = 0xc0a0
+	TLS_RSA_WITH_AES_256_CCM_8                    = 0xc0a1
+	TLS_DHE_RSA_WITH_AES_128_CCM_8                = 0xc0a2
+	TLS_DHE_RSA_WITH_AES_256_CCM_8                = 0xc0a3
+	TLS_PSK_WITH_AES_128_CCM                      = 0xc0a4
+	TLS_PSK_WITH_AES_256_CCM                      = 0xc0a5
+	TLS_DHE_PSK_WITH_AES_128_CCM                  = 0xc0a6
+	TLS_DHE_PSK_WITH_AES_256_CCM                  = 0xc0a7
+	TLS_PSK_WITH_AES_128_CCM_8                    = 0xc0a8
+	TLS_PSK_WITH_AES_256_CCM_8                    = 0xc0a9
+	TLS_PSK_DHE_WITH_AES_128_CCM_8                = 0xc0aa
+	TLS_PSK_DHE_WITH_AES_256_CCM_8                = 0xc0ab
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM              = 0xc0ac
+	TLS_ECDHE_ECDSA_WITH_AES_256_CCM              = 0xc0ad
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8            = 0xc0ae
+	TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8            = 0xc0af
+	TLS_ECCPWD_WITH_AES_128_GCM_SHA256            = 0xc0b0
+	TLS_ECCPWD_WITH_AES_256_GCM_SHA384            = 0xc0b1
+	TLS_ECCPWD_WITH_AES_128_CCM_SHA256            = 0xc0b2
+	TLS_ECCPWD_WITH_AES_256_CCM_SHA384            = 0xc0b3
+	TLS_SHA256_SHA256                             = 0xc0b4
+	TLS_SHA384_SHA384                             = 0xc0b5
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC  = 0xc100
+	TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC       = 0xc101
+	TLS_GOSTR341112_256_WITH_28147_CNT_IMIT       = 0xc102
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L     = 0xc103
+	TLS_GOSTR341112_256_WITH_MAGMA_MGM_L          = 0xc104
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S     = 0xc105
+	TLS_GOSTR341112_256_WITH_MAGMA_MGM_S          = 0xc106
+	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   = 0xcca8
+	TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 = 0xcca9
+	TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256     = 0xccaa
+	TLS_PSK_WITH_CHACHA20_POLY1305_SHA256         = 0xccab
+	TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256   = 0xccac
+	TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256     = 0xccad
+	TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256     = 0xccae
+	TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256         = 0xd001
+	TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384         = 0xd002
+	TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256       = 0xd003
+	TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256         = 0xd005
+	TLS_GOSTR341094_WITH_28147_CNT_IMIT           = 0x0080
+	TLS_GOSTR341001_WITH_28147_CNT_IMIT           = 0x0081
+	TLS_GOSTR341094_WITH_NULL_GOSTR3411           = 0x0082
+	TLS_GOSTR341001_WITH_NULL_GOSTR3411           = 0x0083
+	SSL_RSA_FIPS_WITH_DES_CBC_SHA                 = 0xfefe
+	SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA            = 0xfeff
+	SSL_CK_RC4_128_WITH_MD5                       = 0x010080
+	SSL_CK_RC4_128_EXPORT40_WITH_MD5              = 0x020080
+	SSL_CK_RC2_128_CBC_WITH_MD5                   = 0x030080
+	SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5          = 0x040080
+	SSL_CK_IDEA_128_CBC_WITH_MD5                  = 0x050080
+	SSL_CK_DES_64_CBC_WITH_MD5                    = 0x060040
+	SSL_CK_DES_64_CBC_WITH_SHA                    = 0x060140
+	SSL_CK_DES_192_EDE3_CBC_WITH_MD5              = 0x0700c0
+	SSL_CK_DES_192_EDE3_CBC_WITH_SHA              = 0x0701c0
+	SSL_CK_RC4_64_WITH_MD5                        = 0x080080
+	SSL_CK_DES_64_CFB64_WITH_MD5_1                = 0xff0800
+	SSL_CK_NULL                                   = 0xff0810
+)
+
+type Suit struct {
+	Name         string
+	Protocol     Protocol
+	KeyAgreement KeyAgreement
+	Cipher       Cipher
+	Hash         Hash
+}
+
+var Suits = map[int]Suit{
+	TLS_NULL_WITH_NULL_NULL:                       {Name: "TLS_NULL_WITH_NULL_NULL", Protocol: TLS, KeyAgreement: NULL_KeyAgreement, Cipher: NULL_Cipher, Hash: NULL_Hash},
+	TLS_RSA_WITH_NULL_MD5:                         {Name: "TLS_RSA_WITH_NULL_MD5", Protocol: TLS, KeyAgreement: RSA, Cipher: NULL_Cipher, Hash: MD5},
+	TLS_RSA_WITH_NULL_SHA:                         {Name: "TLS_RSA_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_RSA_EXPORT_WITH_RC4_40_MD5:                {Name: "TLS_RSA_EXPORT_WITH_RC4_40_MD5", Protocol: TLS, KeyAgreement: RSA_EXPORT, Cipher: RC4_40, Hash: MD5},
+	TLS_RSA_WITH_RC4_128_MD5:                      {Name: "TLS_RSA_WITH_RC4_128_MD5", Protocol: TLS, KeyAgreement: RSA, Cipher: RC4_128, Hash: MD5},
+	TLS_RSA_WITH_RC4_128_SHA:                      {Name: "TLS_RSA_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: RC4_128, Hash: SHA},
+	TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5:            {Name: "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5", Protocol: TLS, KeyAgreement: RSA_EXPORT, Cipher: RC2_CBC_40, Hash: MD5},
+	TLS_RSA_WITH_IDEA_CBC_SHA:                     {Name: "TLS_RSA_WITH_IDEA_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: IDEA_CBC, Hash: SHA},
+	TLS_RSA_EXPORT_WITH_DES40_CBC_SHA:             {Name: "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: RSA_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_RSA_WITH_DES_CBC_SHA:                      {Name: "TLS_RSA_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: DES_CBC, Hash: SHA},
+	TLS_RSA_WITH_3DES_EDE_CBC_SHA:                 {Name: "TLS_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA:          {Name: "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_DES_CBC_SHA:                   {Name: "TLS_DH_DSS_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: DES_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA:              {Name: "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA:          {Name: "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_DES_CBC_SHA:                   {Name: "TLS_DH_RSA_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: DES_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA:              {Name: "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA:         {Name: "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_DES_CBC_SHA:                  {Name: "TLS_DHE_DSS_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: DES_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA:         {Name: "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_DES_CBC_SHA:                  {Name: "TLS_DHE_RSA_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: DES_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DH_anon_EXPORT_WITH_RC4_40_MD5:            {Name: "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5", Protocol: TLS, KeyAgreement: DH_anon_EXPORT, Cipher: RC4_40, Hash: MD5},
+	TLS_DH_anon_WITH_RC4_128_MD5:                  {Name: "TLS_DH_anon_WITH_RC4_128_MD5", Protocol: TLS, KeyAgreement: DH_anon, Cipher: RC4_128, Hash: MD5},
+	TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA:         {Name: "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon_EXPORT, Cipher: DES40_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_DES_CBC_SHA:                  {Name: "TLS_DH_anon_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: DES_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_KRB5_WITH_DES_CBC_SHA:                     {Name: "TLS_KRB5_WITH_DES_CBC_SHA", Protocol: TLS, KeyAgreement: KRB5, Cipher: DES_CBC, Hash: SHA},
+	TLS_KRB5_WITH_3DES_EDE_CBC_SHA:                {Name: "TLS_KRB5_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: KRB5, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_KRB5_WITH_RC4_128_SHA:                     {Name: "TLS_KRB5_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: KRB5, Cipher: RC4_128, Hash: SHA},
+	TLS_KRB5_WITH_IDEA_CBC_SHA:                    {Name: "TLS_KRB5_WITH_IDEA_CBC_SHA", Protocol: TLS, KeyAgreement: KRB5, Cipher: IDEA_CBC, Hash: SHA},
+	TLS_KRB5_WITH_DES_CBC_MD5:                     {Name: "TLS_KRB5_WITH_DES_CBC_MD5", Protocol: TLS, KeyAgreement: KRB5, Cipher: DES_CBC, Hash: MD5},
+	TLS_KRB5_WITH_3DES_EDE_CBC_MD5:                {Name: "TLS_KRB5_WITH_3DES_EDE_CBC_MD5", Protocol: TLS, KeyAgreement: KRB5, Cipher: _3DES_EDE_CBC, Hash: MD5},
+	TLS_KRB5_WITH_RC4_128_MD5:                     {Name: "TLS_KRB5_WITH_RC4_128_MD5", Protocol: TLS, KeyAgreement: KRB5, Cipher: RC4_128, Hash: MD5},
+	TLS_KRB5_WITH_IDEA_CBC_MD5:                    {Name: "TLS_KRB5_WITH_IDEA_CBC_MD5", Protocol: TLS, KeyAgreement: KRB5, Cipher: IDEA_CBC, Hash: MD5},
+	TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA:           {Name: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: DES_CBC_40, Hash: SHA},
+	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA:           {Name: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: RC2_CBC_40, Hash: SHA},
+	TLS_KRB5_EXPORT_WITH_RC4_40_SHA:               {Name: "TLS_KRB5_EXPORT_WITH_RC4_40_SHA", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: RC4_40, Hash: SHA},
+	TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5:           {Name: "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: DES_CBC_40, Hash: MD5},
+	TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5:           {Name: "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: RC2_CBC_40, Hash: MD5},
+	TLS_KRB5_EXPORT_WITH_RC4_40_MD5:               {Name: "TLS_KRB5_EXPORT_WITH_RC4_40_MD5", Protocol: TLS, KeyAgreement: KRB5_EXPORT, Cipher: RC4_40, Hash: MD5},
+	TLS_PSK_WITH_NULL_SHA:                         {Name: "TLS_PSK_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: PSK, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_DHE_PSK_WITH_NULL_SHA:                     {Name: "TLS_DHE_PSK_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_RSA_PSK_WITH_NULL_SHA:                     {Name: "TLS_RSA_PSK_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_RSA_WITH_AES_128_CBC_SHA:                  {Name: "TLS_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_AES_128_CBC_SHA:               {Name: "TLS_DH_DSS_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_AES_128_CBC_SHA:               {Name: "TLS_DH_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_AES_128_CBC_SHA:              {Name: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_AES_128_CBC_SHA:              {Name: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_AES_128_CBC_SHA:              {Name: "TLS_DH_anon_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_RSA_WITH_AES_256_CBC_SHA:                  {Name: "TLS_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_AES_256_CBC_SHA:               {Name: "TLS_DH_DSS_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_AES_256_CBC_SHA:               {Name: "TLS_DH_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_AES_256_CBC_SHA:              {Name: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_AES_256_CBC_SHA:              {Name: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_AES_256_CBC_SHA:              {Name: "TLS_DH_anon_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_RSA_WITH_NULL_SHA256:                      {Name: "TLS_RSA_WITH_NULL_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: NULL_Cipher, Hash: SHA256},
+	TLS_RSA_WITH_AES_128_CBC_SHA256:               {Name: "TLS_RSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_RSA_WITH_AES_256_CBC_SHA256:               {Name: "TLS_RSA_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_DH_DSS_WITH_AES_128_CBC_SHA256:            {Name: "TLS_DH_DSS_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_DH_RSA_WITH_AES_128_CBC_SHA256:            {Name: "TLS_DH_RSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_DHE_DSS_WITH_AES_128_CBC_SHA256:           {Name: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_RSA_WITH_CAMELLIA_128_CBC_SHA:             {Name: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA:          {Name: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA:          {Name: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA:         {Name: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA:         {Name: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA:         {Name: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_128_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256:           {Name: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_DH_DSS_WITH_AES_256_CBC_SHA256:            {Name: "TLS_DH_DSS_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_DH_RSA_WITH_AES_256_CBC_SHA256:            {Name: "TLS_DH_RSA_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_DHE_DSS_WITH_AES_256_CBC_SHA256:           {Name: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_DHE_RSA_WITH_AES_256_CBC_SHA256:           {Name: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_DH_anon_WITH_AES_128_CBC_SHA256:           {Name: "TLS_DH_anon_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_DH_anon_WITH_AES_256_CBC_SHA256:           {Name: "TLS_DH_anon_WITH_AES_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_256_CBC, Hash: SHA256},
+	TLS_RSA_WITH_CAMELLIA_256_CBC_SHA:             {Name: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA:          {Name: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA:          {Name: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA:         {Name: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA:         {Name: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA:         {Name: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_256_CBC, Hash: SHA},
+	TLS_PSK_WITH_RC4_128_SHA:                      {Name: "TLS_PSK_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: PSK, Cipher: RC4_128, Hash: SHA},
+	TLS_PSK_WITH_3DES_EDE_CBC_SHA:                 {Name: "TLS_PSK_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: PSK, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_PSK_WITH_AES_128_CBC_SHA:                  {Name: "TLS_PSK_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_PSK_WITH_AES_256_CBC_SHA:                  {Name: "TLS_PSK_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_DHE_PSK_WITH_RC4_128_SHA:                  {Name: "TLS_DHE_PSK_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: RC4_128, Hash: SHA},
+	TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_DHE_PSK_WITH_AES_128_CBC_SHA:              {Name: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_DHE_PSK_WITH_AES_256_CBC_SHA:              {Name: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_RSA_PSK_WITH_RC4_128_SHA:                  {Name: "TLS_RSA_PSK_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: RC4_128, Hash: SHA},
+	TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_RSA_PSK_WITH_AES_128_CBC_SHA:              {Name: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_RSA_PSK_WITH_AES_256_CBC_SHA:              {Name: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_RSA_WITH_SEED_CBC_SHA:                     {Name: "TLS_RSA_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: RSA, Cipher: SEED_CBC, Hash: SHA},
+	TLS_DH_DSS_WITH_SEED_CBC_SHA:                  {Name: "TLS_DH_DSS_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: SEED_CBC, Hash: SHA},
+	TLS_DH_RSA_WITH_SEED_CBC_SHA:                  {Name: "TLS_DH_RSA_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: SEED_CBC, Hash: SHA},
+	TLS_DHE_DSS_WITH_SEED_CBC_SHA:                 {Name: "TLS_DHE_DSS_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: SEED_CBC, Hash: SHA},
+	TLS_DHE_RSA_WITH_SEED_CBC_SHA:                 {Name: "TLS_DHE_RSA_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: SEED_CBC, Hash: SHA},
+	TLS_DH_anon_WITH_SEED_CBC_SHA:                 {Name: "TLS_DH_anon_WITH_SEED_CBC_SHA", Protocol: TLS, KeyAgreement: DH_anon, Cipher: SEED_CBC, Hash: SHA},
+	TLS_RSA_WITH_AES_128_GCM_SHA256:               {Name: "TLS_RSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_RSA_WITH_AES_256_GCM_SHA384:               {Name: "TLS_RSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256:           {Name: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DHE_RSA_WITH_AES_256_GCM_SHA384:           {Name: "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DH_RSA_WITH_AES_128_GCM_SHA256:            {Name: "TLS_DH_RSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DH_RSA_WITH_AES_256_GCM_SHA384:            {Name: "TLS_DH_RSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DHE_DSS_WITH_AES_128_GCM_SHA256:           {Name: "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DHE_DSS_WITH_AES_256_GCM_SHA384:           {Name: "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DH_DSS_WITH_AES_128_GCM_SHA256:            {Name: "TLS_DH_DSS_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DH_DSS_WITH_AES_256_GCM_SHA384:            {Name: "TLS_DH_DSS_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DH_anon_WITH_AES_128_GCM_SHA256:           {Name: "TLS_DH_anon_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DH_anon_WITH_AES_256_GCM_SHA384:           {Name: "TLS_DH_anon_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_anon, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_PSK_WITH_AES_128_GCM_SHA256:               {Name: "TLS_PSK_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_PSK_WITH_AES_256_GCM_SHA384:               {Name: "TLS_PSK_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_DHE_PSK_WITH_AES_128_GCM_SHA256:           {Name: "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_DHE_PSK_WITH_AES_256_GCM_SHA384:           {Name: "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_RSA_PSK_WITH_AES_128_GCM_SHA256:           {Name: "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_RSA_PSK_WITH_AES_256_GCM_SHA384:           {Name: "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_PSK_WITH_AES_128_CBC_SHA256:               {Name: "TLS_PSK_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_PSK_WITH_AES_256_CBC_SHA384:               {Name: "TLS_PSK_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_PSK_WITH_NULL_SHA256:                      {Name: "TLS_PSK_WITH_NULL_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: NULL_Cipher, Hash: SHA256},
+	TLS_PSK_WITH_NULL_SHA384:                      {Name: "TLS_PSK_WITH_NULL_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: NULL_Cipher, Hash: SHA384},
+	TLS_DHE_PSK_WITH_AES_128_CBC_SHA256:           {Name: "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_DHE_PSK_WITH_AES_256_CBC_SHA384:           {Name: "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_DHE_PSK_WITH_NULL_SHA256:                  {Name: "TLS_DHE_PSK_WITH_NULL_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: NULL_Cipher, Hash: SHA256},
+	TLS_DHE_PSK_WITH_NULL_SHA384:                  {Name: "TLS_DHE_PSK_WITH_NULL_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: NULL_Cipher, Hash: SHA384},
+	TLS_RSA_PSK_WITH_AES_128_CBC_SHA256:           {Name: "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_RSA_PSK_WITH_AES_256_CBC_SHA384:           {Name: "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_RSA_PSK_WITH_NULL_SHA256:                  {Name: "TLS_RSA_PSK_WITH_NULL_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: NULL_Cipher, Hash: SHA256},
+	TLS_RSA_PSK_WITH_NULL_SHA384:                  {Name: "TLS_RSA_PSK_WITH_NULL_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: NULL_Cipher, Hash: SHA384},
+	TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256:          {Name: "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256:       {Name: "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256:       {Name: "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256:      {Name: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256:      {Name: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256:      {Name: "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256:          {Name: "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256:       {Name: "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256:       {Name: "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256:      {Name: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256:      {Name: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256:      {Name: "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_256_CBC, Hash: SHA256},
+	TLS_SM4_GCM_SM3:                               {Name: "TLS_SM4_GCM_SM3", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_SM4_CCM_SM3:                               {Name: "TLS_SM4_CCM_SM3", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_EMPTY_RENEGOTIATION_INFO_SCSV:             {Name: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AES_128_GCM_SHA256:                        {Name: "TLS_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AES_256_GCM_SHA384:                        {Name: "TLS_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_CHACHA20_POLY1305_SHA256:                  {Name: "TLS_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AES_128_CCM_SHA256:                        {Name: "TLS_AES_128_CCM_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AES_128_CCM_8_SHA256:                      {Name: "TLS_AES_128_CCM_8_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AEGIS_256_SHA384:                          {Name: "TLS_AEGIS_256_SHA384", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_AEGIS_128L_SHA256:                         {Name: "TLS_AEGIS_128L_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_FALLBACK_SCSV:                             {Name: "TLS_FALLBACK_SCSV", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDH_ECDSA_WITH_NULL_SHA:                  {Name: "TLS_ECDH_ECDSA_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDH_ECDSA_WITH_RC4_128_SHA:               {Name: "TLS_ECDH_ECDSA_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA:          {Name: "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA:           {Name: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA:           {Name: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_NULL_SHA:                 {Name: "TLS_ECDHE_ECDSA_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA:              {Name: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA:         {Name: "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA:          {Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA:          {Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDH_RSA_WITH_NULL_SHA:                    {Name: "TLS_ECDH_RSA_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDH_RSA_WITH_RC4_128_SHA:                 {Name: "TLS_ECDH_RSA_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA:            {Name: "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA:             {Name: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA:             {Name: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDHE_RSA_WITH_NULL_SHA:                   {Name: "TLS_ECDHE_RSA_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDHE_RSA_WITH_RC4_128_SHA:                {Name: "TLS_ECDHE_RSA_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA:           {Name: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:            {Name: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:            {Name: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDH_anon_WITH_NULL_SHA:                   {Name: "TLS_ECDH_anon_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDH_anon, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDH_anon_WITH_RC4_128_SHA:                {Name: "TLS_ECDH_anon_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDH_anon, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA:           {Name: "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_anon, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDH_anon_WITH_AES_128_CBC_SHA:            {Name: "TLS_ECDH_anon_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_anon, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDH_anon_WITH_AES_256_CBC_SHA:            {Name: "TLS_ECDH_anon_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDH_anon, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA:             {Name: "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA:         {Name: "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_RSA, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA:         {Name: "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_DSS, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_SRP_SHA_WITH_AES_128_CBC_SHA:              {Name: "TLS_SRP_SHA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA:          {Name: "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_RSA, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA:          {Name: "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_DSS, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_SRP_SHA_WITH_AES_256_CBC_SHA:              {Name: "TLS_SRP_SHA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA:          {Name: "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_RSA, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA:          {Name: "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: SRP_SHA_DSS, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256:       {Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384:       {Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256:        {Name: "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384:        {Name: "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256:         {Name: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384:         {Name: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256:          {Name: "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384:          {Name: "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:       {Name: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:       {Name: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256:        {Name: "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384:        {Name: "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:         {Name: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:         {Name: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256:          {Name: "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384:          {Name: "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECDHE_PSK_WITH_RC4_128_SHA:                {Name: "TLS_ECDHE_PSK_WITH_RC4_128_SHA", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: RC4_128, Hash: SHA},
+	TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA:           {Name: "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA:            {Name: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_128_CBC, Hash: SHA},
+	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA:            {Name: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_256_CBC, Hash: SHA},
+	TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256:         {Name: "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_128_CBC, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384:         {Name: "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_256_CBC, Hash: SHA384},
+	TLS_ECDHE_PSK_WITH_NULL_SHA:                   {Name: "TLS_ECDHE_PSK_WITH_NULL_SHA", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: NULL_Cipher, Hash: SHA},
+	TLS_ECDHE_PSK_WITH_NULL_SHA256:                {Name: "TLS_ECDHE_PSK_WITH_NULL_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: NULL_Cipher, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_NULL_SHA384:                {Name: "TLS_ECDHE_PSK_WITH_NULL_SHA384", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: NULL_Cipher, Hash: SHA384},
+	TLS_RSA_WITH_ARIA_128_CBC_SHA256:              {Name: "TLS_RSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_RSA_WITH_ARIA_256_CBC_SHA384:              {Name: "TLS_RSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: RSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256:           {Name: "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384:           {Name: "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256:           {Name: "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384:           {Name: "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256:          {Name: "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384:          {Name: "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256:          {Name: "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384:          {Name: "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DH_anon_WITH_ARIA_128_CBC_SHA256:          {Name: "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DH_anon_WITH_ARIA_256_CBC_SHA384:          {Name: "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DH_anon, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256:      {Name: "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384:      {Name: "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256:       {Name: "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384:       {Name: "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256:        {Name: "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384:        {Name: "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256:         {Name: "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384:         {Name: "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_RSA_WITH_ARIA_128_GCM_SHA256:              {Name: "TLS_RSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_RSA_WITH_ARIA_256_GCM_SHA384:              {Name: "TLS_RSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256:          {Name: "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384:          {Name: "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256:           {Name: "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384:           {Name: "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256:          {Name: "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384:          {Name: "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256:           {Name: "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384:           {Name: "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DH_anon_WITH_ARIA_128_GCM_SHA256:          {Name: "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DH_anon_WITH_ARIA_256_GCM_SHA384:          {Name: "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_anon, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256:      {Name: "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384:      {Name: "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256:       {Name: "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384:       {Name: "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256:        {Name: "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384:        {Name: "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256:         {Name: "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384:         {Name: "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_PSK_WITH_ARIA_128_CBC_SHA256:              {Name: "TLS_PSK_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_PSK_WITH_ARIA_256_CBC_SHA384:              {Name: "TLS_PSK_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256:          {Name: "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384:          {Name: "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256:          {Name: "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384:          {Name: "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_PSK_WITH_ARIA_128_GCM_SHA256:              {Name: "TLS_PSK_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_PSK_WITH_ARIA_256_GCM_SHA384:              {Name: "TLS_PSK_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256:          {Name: "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384:          {Name: "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256:          {Name: "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: ARIA_128_GCM, Hash: SHA256},
+	TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384:          {Name: "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: ARIA_256_GCM, Hash: SHA384},
+	TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256:        {Name: "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: ARIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384:        {Name: "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: ARIA_256_CBC, Hash: SHA384},
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256:  {Name: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384:  {Name: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256:   {Name: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384:   {Name: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256:    {Name: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384:    {Name: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256:     {Name: "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384:     {Name: "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256:          {Name: "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384:          {Name: "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256:      {Name: "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384:      {Name: "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256:       {Name: "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384:       {Name: "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_RSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256:      {Name: "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384:      {Name: "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_DSS, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256:       {Name: "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384:       {Name: "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_DSS, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256:      {Name: "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384:      {Name: "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DH_anon, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256:  {Name: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384:  {Name: "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256:   {Name: "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384:   {Name: "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_ECDSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256:    {Name: "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384:    {Name: "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256:     {Name: "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384:     {Name: "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDH_RSA, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256:          {Name: "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384:          {Name: "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256:      {Name: "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384:      {Name: "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256:      {Name: "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: CAMELLIA_128_GCM, Hash: SHA256},
+	TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384:      {Name: "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: CAMELLIA_256_GCM, Hash: SHA384},
+	TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256:          {Name: "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384:          {Name: "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: PSK, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256:      {Name: "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384:      {Name: "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256:      {Name: "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384:      {Name: "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256:    {Name: "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: CAMELLIA_128_CBC, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384:    {Name: "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: CAMELLIA_256_CBC, Hash: SHA384},
+	TLS_RSA_WITH_AES_128_CCM:                      {Name: "TLS_RSA_WITH_AES_128_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_RSA_WITH_AES_256_CCM:                      {Name: "TLS_RSA_WITH_AES_256_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_RSA_WITH_AES_128_CCM:                  {Name: "TLS_DHE_RSA_WITH_AES_128_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_RSA_WITH_AES_256_CCM:                  {Name: "TLS_DHE_RSA_WITH_AES_256_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_RSA_WITH_AES_128_CCM_8:                    {Name: "TLS_RSA_WITH_AES_128_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_RSA_WITH_AES_256_CCM_8:                    {Name: "TLS_RSA_WITH_AES_256_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_RSA_WITH_AES_128_CCM_8:                {Name: "TLS_DHE_RSA_WITH_AES_128_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_RSA_WITH_AES_256_CCM_8:                {Name: "TLS_DHE_RSA_WITH_AES_256_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_WITH_AES_128_CCM:                      {Name: "TLS_PSK_WITH_AES_128_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_WITH_AES_256_CCM:                      {Name: "TLS_PSK_WITH_AES_256_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_PSK_WITH_AES_128_CCM:                  {Name: "TLS_DHE_PSK_WITH_AES_128_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_DHE_PSK_WITH_AES_256_CCM:                  {Name: "TLS_DHE_PSK_WITH_AES_256_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_WITH_AES_128_CCM_8:                    {Name: "TLS_PSK_WITH_AES_128_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_WITH_AES_256_CCM_8:                    {Name: "TLS_PSK_WITH_AES_256_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_DHE_WITH_AES_128_CCM_8:                {Name: "TLS_PSK_DHE_WITH_AES_128_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_PSK_DHE_WITH_AES_256_CCM_8:                {Name: "TLS_PSK_DHE_WITH_AES_256_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM:              {Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDHE_ECDSA_WITH_AES_256_CCM:              {Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CCM", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8:            {Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8:            {Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECCPWD_WITH_AES_128_GCM_SHA256:            {Name: "TLS_ECCPWD_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECCPWD, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECCPWD_WITH_AES_256_GCM_SHA384:            {Name: "TLS_ECCPWD_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECCPWD, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECCPWD_WITH_AES_128_CCM_SHA256:            {Name: "TLS_ECCPWD_WITH_AES_128_CCM_SHA256", Protocol: TLS, KeyAgreement: ECCPWD, Cipher: AES_128_CCM, Hash: SHA256},
+	TLS_ECCPWD_WITH_AES_256_CCM_SHA384:            {Name: "TLS_ECCPWD_WITH_AES_256_CCM_SHA384", Protocol: TLS, KeyAgreement: ECCPWD, Cipher: AES_256_CCM, Hash: SHA384},
+	TLS_SHA256_SHA256:                             {Name: "TLS_SHA256_SHA256", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_SHA384_SHA384:                             {Name: "TLS_SHA384_SHA384", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC:  {Name: "TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC:       {Name: "TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_28147_CNT_IMIT:       {Name: "TLS_GOSTR341112_256_WITH_28147_CNT_IMIT", Protocol: TLS, KeyAgreement: GOSTR341112_256, Cipher: _28147_CNT, Hash: IMIT},
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L:     {Name: "TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_MAGMA_MGM_L:          {Name: "TLS_GOSTR341112_256_WITH_MAGMA_MGM_L", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S:     {Name: "TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_GOSTR341112_256_WITH_MAGMA_MGM_S:          {Name: "TLS_GOSTR341112_256_WITH_MAGMA_MGM_S", Protocol: TLS, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:   {Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: ECDHE_RSA, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: {Name: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: ECDHE_ECDSA, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256:     {Name: "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: DHE_RSA, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_PSK_WITH_CHACHA20_POLY1305_SHA256:         {Name: "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: PSK, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256:   {Name: "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256:     {Name: "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: DHE_PSK, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256:     {Name: "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256", Protocol: TLS, KeyAgreement: RSA_PSK, Cipher: CHACHA20_POLY1305, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256:         {Name: "TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_128_GCM, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384:         {Name: "TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_256_GCM, Hash: SHA384},
+	TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256:       {Name: "TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_128_CCM_8, Hash: SHA256},
+	TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256:         {Name: "TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256", Protocol: TLS, KeyAgreement: ECDHE_PSK, Cipher: AES_128_CCM, Hash: SHA256},
+	TLS_GOSTR341094_WITH_28147_CNT_IMIT:           {Name: "TLS_GOSTR341094_WITH_28147_CNT_IMIT", Protocol: TLS, KeyAgreement: GOSTR341094, Cipher: _28147_CNT, Hash: IMIT},
+	TLS_GOSTR341001_WITH_28147_CNT_IMIT:           {Name: "TLS_GOSTR341001_WITH_28147_CNT_IMIT", Protocol: TLS, KeyAgreement: GOSTR341001, Cipher: _28147_CNT, Hash: IMIT},
+	TLS_GOSTR341094_WITH_NULL_GOSTR3411:           {Name: "TLS_GOSTR341094_WITH_NULL_GOSTR3411", Protocol: TLS, KeyAgreement: GOSTR341094, Cipher: NULL_Cipher, Hash: GOSTR3411},
+	TLS_GOSTR341001_WITH_NULL_GOSTR3411:           {Name: "TLS_GOSTR341001_WITH_NULL_GOSTR3411", Protocol: TLS, KeyAgreement: GOSTR341001, Cipher: NULL_Cipher, Hash: GOSTR3411},
+	SSL_RSA_FIPS_WITH_DES_CBC_SHA:                 {Name: "SSL_RSA_FIPS_WITH_DES_CBC_SHA", Protocol: SSL, KeyAgreement: RSA_FIPS, Cipher: DES_CBC, Hash: SHA},
+	SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA:            {Name: "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA", Protocol: SSL, KeyAgreement: RSA_FIPS, Cipher: _3DES_EDE_CBC, Hash: SHA},
+	SSL_CK_RC4_128_WITH_MD5:                       {Name: "SSL_CK_RC4_128_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_RC4_128_EXPORT40_WITH_MD5:              {Name: "SSL_CK_RC4_128_EXPORT40_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_RC2_128_CBC_WITH_MD5:                   {Name: "SSL_CK_RC2_128_CBC_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5:          {Name: "SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_IDEA_128_CBC_WITH_MD5:                  {Name: "SSL_CK_IDEA_128_CBC_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_DES_64_CBC_WITH_MD5:                    {Name: "SSL_CK_DES_64_CBC_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_DES_64_CBC_WITH_SHA:                    {Name: "SSL_CK_DES_64_CBC_WITH_SHA", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_DES_192_EDE3_CBC_WITH_MD5:              {Name: "SSL_CK_DES_192_EDE3_CBC_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_DES_192_EDE3_CBC_WITH_SHA:              {Name: "SSL_CK_DES_192_EDE3_CBC_WITH_SHA", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_RC4_64_WITH_MD5:                        {Name: "SSL_CK_RC4_64_WITH_MD5", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_DES_64_CFB64_WITH_MD5_1:                {Name: "SSL_CK_DES_64_CFB64_WITH_MD5_1", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+	SSL_CK_NULL:                                   {Name: "SSL_CK_NULL", Protocol: SSL, KeyAgreement: UNKNOWN_KeyAgreement, Cipher: UNKNOWN_Cipher, Hash: UNKNOWN_Hash},
+}

format/tls/ciphersuites/other.csv

@@ -0,0 +1,21 @@
+# GOST
+"0x00,0x80",TLS_GOSTR341094_WITH_28147_CNT_IMIT,,,
+"0x00,0x81",TLS_GOSTR341001_WITH_28147_CNT_IMIT,,,
+"0x00,0x82",TLS_GOSTR341094_WITH_NULL_GOSTR3411,,,
+"0x00,0x83",TLS_GOSTR341001_WITH_NULL_GOSTR3411,,,
+# SSL
+"0xfe,0xfe",SSL_RSA_FIPS_WITH_DES_CBC_SHA,,,
+"0xfe,0xff",SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,,,
+# SSL and other rare ones
+"0x01,0x00,0x80",SSL_CK_RC4_128_WITH_MD5,,,
+"0x02,0x00,0x80",SSL_CK_RC4_128_EXPORT40_WITH_MD5,,,
+"0x03,0x00,0x80",SSL_CK_RC2_128_CBC_WITH_MD5,,,
+"0x04,0x00,0x80",SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5,,,
+"0x05,0x00,0x80",SSL_CK_IDEA_128_CBC_WITH_MD5,,,
+"0x06,0x00,0x40",SSL_CK_DES_64_CBC_WITH_MD5,,,
+"0x06,0x01,0x40",SSL_CK_DES_64_CBC_WITH_SHA,,,
+"0x07,0x00,0xc0",SSL_CK_DES_192_EDE3_CBC_WITH_MD5,,,
+"0x07,0x01,0xc0",SSL_CK_DES_192_EDE3_CBC_WITH_SHA,,,
+"0x08,0x00,0x80",SSL_CK_RC4_64_WITH_MD5,,,
+"0xff,0x08,0x00",SSL_CK_DES_64_CFB64_WITH_MD5_1,,,
+"0xff,0x08,0x10",SSL_CK_NULL,,,

format/tls/ciphersuites/tls-parameters-4.csv

@@ -0,0 +1,449 @@
+Value,Description,DTLS-OK,Recommended,Reference
+"0x00,0x00",TLS_NULL_WITH_NULL_NULL,Y,N,[RFC5246]
+"0x00,0x01",TLS_RSA_WITH_NULL_MD5,Y,N,[RFC5246]
+"0x00,0x02",TLS_RSA_WITH_NULL_SHA,Y,N,[RFC5246]
+"0x00,0x03",TLS_RSA_EXPORT_WITH_RC4_40_MD5,N,N,[RFC4346][RFC6347]
+"0x00,0x04",TLS_RSA_WITH_RC4_128_MD5,N,N,[RFC5246][RFC6347]
+"0x00,0x05",TLS_RSA_WITH_RC4_128_SHA,N,N,[RFC5246][RFC6347]
+"0x00,0x06",TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5,Y,N,[RFC4346]
+"0x00,0x07",TLS_RSA_WITH_IDEA_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x08",TLS_RSA_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x09",TLS_RSA_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x0A",TLS_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x0B",TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x0C",TLS_DH_DSS_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x0D",TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x0E",TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x0F",TLS_DH_RSA_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x10",TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x11",TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x12",TLS_DHE_DSS_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x13",TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x14",TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x15",TLS_DHE_RSA_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x16",TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x17",TLS_DH_anon_EXPORT_WITH_RC4_40_MD5,N,N,[RFC4346][RFC6347]
+"0x00,0x18",TLS_DH_anon_WITH_RC4_128_MD5,N,N,[RFC5246][RFC6347]
+"0x00,0x19",TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346]
+"0x00,0x1A",TLS_DH_anon_WITH_DES_CBC_SHA,Y,N,[RFC5469][status-change-tls-des-idea-ciphers-to-historic]
+"0x00,0x1B",TLS_DH_anon_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x1C-1D",Reserved to avoid conflicts with SSLv3,,,[RFC5246]
+"0x00,0x1E",TLS_KRB5_WITH_DES_CBC_SHA,Y,N,[RFC2712]
+"0x00,0x1F",TLS_KRB5_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC2712]
+"0x00,0x20",TLS_KRB5_WITH_RC4_128_SHA,N,N,[RFC2712][RFC6347]
+"0x00,0x21",TLS_KRB5_WITH_IDEA_CBC_SHA,Y,N,[RFC2712]
+"0x00,0x22",TLS_KRB5_WITH_DES_CBC_MD5,Y,N,[RFC2712]
+"0x00,0x23",TLS_KRB5_WITH_3DES_EDE_CBC_MD5,Y,N,[RFC2712]
+"0x00,0x24",TLS_KRB5_WITH_RC4_128_MD5,N,N,[RFC2712][RFC6347]
+"0x00,0x25",TLS_KRB5_WITH_IDEA_CBC_MD5,Y,N,[RFC2712]
+"0x00,0x26",TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA,Y,N,[RFC2712]
+"0x00,0x27",TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA,Y,N,[RFC2712]
+"0x00,0x28",TLS_KRB5_EXPORT_WITH_RC4_40_SHA,N,N,[RFC2712][RFC6347]
+"0x00,0x29",TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5,Y,N,[RFC2712]
+"0x00,0x2A",TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5,Y,N,[RFC2712]
+"0x00,0x2B",TLS_KRB5_EXPORT_WITH_RC4_40_MD5,N,N,[RFC2712][RFC6347]
+"0x00,0x2C",TLS_PSK_WITH_NULL_SHA,Y,N,[RFC4785]
+"0x00,0x2D",TLS_DHE_PSK_WITH_NULL_SHA,Y,N,[RFC4785]
+"0x00,0x2E",TLS_RSA_PSK_WITH_NULL_SHA,Y,N,[RFC4785]
+"0x00,0x2F",TLS_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x30",TLS_DH_DSS_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x31",TLS_DH_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x32",TLS_DHE_DSS_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x33",TLS_DHE_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x34",TLS_DH_anon_WITH_AES_128_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x35",TLS_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x36",TLS_DH_DSS_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x37",TLS_DH_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x38",TLS_DHE_DSS_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x39",TLS_DHE_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x3A",TLS_DH_anon_WITH_AES_256_CBC_SHA,Y,N,[RFC5246]
+"0x00,0x3B",TLS_RSA_WITH_NULL_SHA256,Y,N,[RFC5246]
+"0x00,0x3C",TLS_RSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x3D",TLS_RSA_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x3E",TLS_DH_DSS_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x3F",TLS_DH_RSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x40",TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x41",TLS_RSA_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x42",TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x43",TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x44",TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x45",TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x46",TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x47-4F","Reserved to avoid conflicts with         
+deployed implementations",,,[Pasi_Eronen]
+"0x00,0x50-58",Reserved to avoid conflicts,,,"[Pasi Eronen, <pasi.eronen&nokia.com>, 2008-04-04.  2008-04-04]"
+"0x00,0x59-5C","Reserved to avoid conflicts with         
+deployed implementations",,,[Pasi_Eronen]
+"0x00,0x5D-5F",Unassigned,,,
+"0x00,0x60-66","Reserved to avoid conflicts with
+widely deployed implementations",,,[Pasi_Eronen]
+"0x00,0x67",TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x68",TLS_DH_DSS_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x69",TLS_DH_RSA_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x6A",TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x6B",TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x6C",TLS_DH_anon_WITH_AES_128_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x6D",TLS_DH_anon_WITH_AES_256_CBC_SHA256,Y,N,[RFC5246]
+"0x00,0x6E-83",Unassigned,,,
+"0x00,0x84",TLS_RSA_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x85",TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x86",TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x87",TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x88",TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x89",TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA,Y,N,[RFC5932]
+"0x00,0x8A",TLS_PSK_WITH_RC4_128_SHA,N,N,[RFC4279][RFC6347]
+"0x00,0x8B",TLS_PSK_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x8C",TLS_PSK_WITH_AES_128_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x8D",TLS_PSK_WITH_AES_256_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x8E",TLS_DHE_PSK_WITH_RC4_128_SHA,N,N,[RFC4279][RFC6347]
+"0x00,0x8F",TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x90",TLS_DHE_PSK_WITH_AES_128_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x91",TLS_DHE_PSK_WITH_AES_256_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x92",TLS_RSA_PSK_WITH_RC4_128_SHA,N,N,[RFC4279][RFC6347]
+"0x00,0x93",TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x94",TLS_RSA_PSK_WITH_AES_128_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x95",TLS_RSA_PSK_WITH_AES_256_CBC_SHA,Y,N,[RFC4279]
+"0x00,0x96",TLS_RSA_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x97",TLS_DH_DSS_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x98",TLS_DH_RSA_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x99",TLS_DHE_DSS_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x9A",TLS_DHE_RSA_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x9B",TLS_DH_anon_WITH_SEED_CBC_SHA,Y,N,[RFC4162]
+"0x00,0x9C",TLS_RSA_WITH_AES_128_GCM_SHA256,Y,N,[RFC5288]
+"0x00,0x9D",TLS_RSA_WITH_AES_256_GCM_SHA384,Y,N,[RFC5288]
+"0x00,0x9E",TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,Y,Y,[RFC5288]
+"0x00,0x9F",TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,Y,Y,[RFC5288]
+"0x00,0xA0",TLS_DH_RSA_WITH_AES_128_GCM_SHA256,Y,N,[RFC5288]
+"0x00,0xA1",TLS_DH_RSA_WITH_AES_256_GCM_SHA384,Y,N,[RFC5288]
+"0x00,0xA2",TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,Y,N,[RFC5288]
+"0x00,0xA3",TLS_DHE_DSS_WITH_AES_256_GCM_SHA384,Y,N,[RFC5288]
+"0x00,0xA4",TLS_DH_DSS_WITH_AES_128_GCM_SHA256,Y,N,[RFC5288]
+"0x00,0xA5",TLS_DH_DSS_WITH_AES_256_GCM_SHA384,Y,N,[RFC5288]
+"0x00,0xA6",TLS_DH_anon_WITH_AES_128_GCM_SHA256,Y,N,[RFC5288]
+"0x00,0xA7",TLS_DH_anon_WITH_AES_256_GCM_SHA384,Y,N,[RFC5288]
+"0x00,0xA8",TLS_PSK_WITH_AES_128_GCM_SHA256,Y,N,[RFC5487]
+"0x00,0xA9",TLS_PSK_WITH_AES_256_GCM_SHA384,Y,N,[RFC5487]
+"0x00,0xAA",TLS_DHE_PSK_WITH_AES_128_GCM_SHA256,Y,Y,[RFC5487]
+"0x00,0xAB",TLS_DHE_PSK_WITH_AES_256_GCM_SHA384,Y,Y,[RFC5487]
+"0x00,0xAC",TLS_RSA_PSK_WITH_AES_128_GCM_SHA256,Y,N,[RFC5487]
+"0x00,0xAD",TLS_RSA_PSK_WITH_AES_256_GCM_SHA384,Y,N,[RFC5487]
+"0x00,0xAE",TLS_PSK_WITH_AES_128_CBC_SHA256,Y,N,[RFC5487]
+"0x00,0xAF",TLS_PSK_WITH_AES_256_CBC_SHA384,Y,N,[RFC5487]
+"0x00,0xB0",TLS_PSK_WITH_NULL_SHA256,Y,N,[RFC5487]
+"0x00,0xB1",TLS_PSK_WITH_NULL_SHA384,Y,N,[RFC5487]
+"0x00,0xB2",TLS_DHE_PSK_WITH_AES_128_CBC_SHA256,Y,N,[RFC5487]
+"0x00,0xB3",TLS_DHE_PSK_WITH_AES_256_CBC_SHA384,Y,N,[RFC5487]
+"0x00,0xB4",TLS_DHE_PSK_WITH_NULL_SHA256,Y,N,[RFC5487]
+"0x00,0xB5",TLS_DHE_PSK_WITH_NULL_SHA384,Y,N,[RFC5487]
+"0x00,0xB6",TLS_RSA_PSK_WITH_AES_128_CBC_SHA256,Y,N,[RFC5487]
+"0x00,0xB7",TLS_RSA_PSK_WITH_AES_256_CBC_SHA384,Y,N,[RFC5487]
+"0x00,0xB8",TLS_RSA_PSK_WITH_NULL_SHA256,Y,N,[RFC5487]
+"0x00,0xB9",TLS_RSA_PSK_WITH_NULL_SHA384,Y,N,[RFC5487]
+"0x00,0xBA",TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xBB",TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xBC",TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xBD",TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xBE",TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xBF",TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC0",TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC1",TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC2",TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC3",TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC4",TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC5",TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256,Y,N,[RFC5932]
+"0x00,0xC6",TLS_SM4_GCM_SM3,N,N,[RFC8998]
+"0x00,0xC7",TLS_SM4_CCM_SM3,N,N,[RFC8998]
+"0x00,0xC8-FE",Unassigned,,,
+"0x00,0xFF",TLS_EMPTY_RENEGOTIATION_INFO_SCSV,Y,N,[RFC5746]
+"0x01-09,*",Unassigned,,,
+"0x0A,0x00-09",Unassigned,,,
+"0x0A,0x0A",Reserved,Y,N,[RFC8701]
+"0x0A,0x0B-FF",Unassigned,,,
+"0x0B-12,*",Unassigned,,,
+"0x13,0x00",Unassigned,,,
+"0x13,0x01",TLS_AES_128_GCM_SHA256,Y,Y,[RFC8446]
+"0x13,0x02",TLS_AES_256_GCM_SHA384,Y,Y,[RFC8446]
+"0x13,0x03",TLS_CHACHA20_POLY1305_SHA256,Y,Y,[RFC8446]
+"0x13,0x04",TLS_AES_128_CCM_SHA256,Y,Y,[RFC8446]
+"0x13,0x05",TLS_AES_128_CCM_8_SHA256,Y,N,[RFC8446][IESG Action 2018-08-16]
+"0x13,0x06",TLS_AEGIS_256_SHA384,Y,N,[draft-irtf-cfrg-aegis-aead-00]
+"0x13,0x07",TLS_AEGIS_128L_SHA256,Y,N,[draft-irtf-cfrg-aegis-aead-00]
+"0x13,0x08-FF",Unassigned,,,
+"0x14-19,*",Unassigned,,,
+"0x1A,0x00-19",Unassigned,,,
+"0x1A,0x1A",Reserved,Y,N,[RFC8701]
+"0x1A,0x1B-FF",Unassigned,,,
+"0x1B-29,*",Unassigned,,,
+"0x2A,0x00-29",Unassigned,,,
+"0x2A,0x2A",Reserved,Y,N,[RFC8701]
+"0x2A,0x2B-FF",Unassigned,,,
+"0x2B-39,*",Unassigned,,,
+"0x3A,0x00-39",Unassigned,,,
+"0x3A,0x3A",Reserved,Y,N,[RFC8701]
+"0x3A,0x3B-FF",Unassigned,,,
+"0x3B-49,*",Unassigned,,,
+"0x4A,0x00-49",Unassigned,,,
+"0x4A,0x4A",Reserved,Y,N,[RFC8701]
+"0x4A,0x4B-FF",Unassigned,,,
+"0x4B-55,*",Unassigned,,,
+"0x56,0x00",TLS_FALLBACK_SCSV,Y,N,[RFC7507]
+"0x56,0x01-FF",Unassigned,,,
+"0x57-59,*",Unassigned,,,
+"0x5A,0x00-59",Unassigned,,,
+"0x5A,0x5A",Reserved,Y,N,[RFC8701]
+"0x5A,0x5B-FF",Unassigned,,,
+"0x5B-69,*",Unassigned,,,
+"0x6A,0x00-69",Unassigned,,,
+"0x6A,0x6A",Reserved,Y,N,[RFC8701]
+"0x6A,0x6B-FF",Unassigned,,,
+"0x6B-79,*",Unassigned,,,
+"0x7A,0x00-79",Unassigned,,,
+"0x7A,0x7A",Reserved,Y,N,[RFC8701]
+"0x7A,0x7B-FF",Unassigned,,,
+"0x7B-89,*",Unassigned,,,
+"0x8A,0x00-89",Unassigned,,,
+"0x8A,0x8A",Reserved,Y,N,[RFC8701]
+"0x8A,0x8B-FF",Unassigned,,,
+"0x8B-99,*",Unassigned,,,
+"0x9A,0x00-99",Unassigned,,,
+"0x9A,0x9A",Reserved,Y,N,[RFC8701]
+"0x9A,0x9B-FF",Unassigned,,,
+"0x9B-A9,*",Unassigned,,,
+"0xAA,0x00-A9",Unassigned,,,
+"0xAA,0xAA",Reserved,Y,N,[RFC8701]
+"0xAA,0xAB-FF",Unassigned,,,
+"0xAB-B9,*",Unassigned,,,
+"0xBA,0x00-B9",Unassigned,,,
+"0xBA,0xBA",Reserved,Y,N,[RFC8701]
+"0xBA,0xBB-FF",Unassigned,,,
+"0xBB-BF,*",Unassigned,,,
+"0xC0,0x00",Unassigned,,,
+"0xC0,0x01",TLS_ECDH_ECDSA_WITH_NULL_SHA,Y,N,[RFC8422]
+"0xC0,0x02",TLS_ECDH_ECDSA_WITH_RC4_128_SHA,N,N,[RFC8422][RFC6347]
+"0xC0,0x03",TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x04",TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x05",TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x06",TLS_ECDHE_ECDSA_WITH_NULL_SHA,Y,N,[RFC8422]
+"0xC0,0x07",TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,N,N,[RFC8422][RFC6347]
+"0xC0,0x08",TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x09",TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x0A",TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x0B",TLS_ECDH_RSA_WITH_NULL_SHA,Y,N,[RFC8422]
+"0xC0,0x0C",TLS_ECDH_RSA_WITH_RC4_128_SHA,N,N,[RFC8422][RFC6347]
+"0xC0,0x0D",TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x0E",TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x0F",TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x10",TLS_ECDHE_RSA_WITH_NULL_SHA,Y,N,[RFC8422]
+"0xC0,0x11",TLS_ECDHE_RSA_WITH_RC4_128_SHA,N,N,[RFC8422][RFC6347]
+"0xC0,0x12",TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x13",TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x14",TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x15",TLS_ECDH_anon_WITH_NULL_SHA,Y,N,[RFC8422]
+"0xC0,0x16",TLS_ECDH_anon_WITH_RC4_128_SHA,N,N,[RFC8422][RFC6347]
+"0xC0,0x17",TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x18",TLS_ECDH_anon_WITH_AES_128_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x19",TLS_ECDH_anon_WITH_AES_256_CBC_SHA,Y,N,[RFC8422]
+"0xC0,0x1A",TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x1B",TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x1C",TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x1D",TLS_SRP_SHA_WITH_AES_128_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x1E",TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x1F",TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x20",TLS_SRP_SHA_WITH_AES_256_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x21",TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x22",TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,Y,N,[RFC5054]
+"0xC0,0x23",TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5289]
+"0xC0,0x24",TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,Y,N,[RFC5289]
+"0xC0,0x25",TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5289]
+"0xC0,0x26",TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,Y,N,[RFC5289]
+"0xC0,0x27",TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5289]
+"0xC0,0x28",TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,Y,N,[RFC5289]
+"0xC0,0x29",TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,Y,N,[RFC5289]
+"0xC0,0x2A",TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,Y,N,[RFC5289]
+"0xC0,0x2B",TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,Y,Y,[RFC5289]
+"0xC0,0x2C",TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,Y,Y,[RFC5289]
+"0xC0,0x2D",TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,Y,N,[RFC5289]
+"0xC0,0x2E",TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,Y,N,[RFC5289]
+"0xC0,0x2F",TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,Y,Y,[RFC5289]
+"0xC0,0x30",TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,Y,Y,[RFC5289]
+"0xC0,0x31",TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,Y,N,[RFC5289]
+"0xC0,0x32",TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,Y,N,[RFC5289]
+"0xC0,0x33",TLS_ECDHE_PSK_WITH_RC4_128_SHA,N,N,[RFC5489][RFC6347]
+"0xC0,0x34",TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA,Y,N,[RFC5489]
+"0xC0,0x35",TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA,Y,N,[RFC5489]
+"0xC0,0x36",TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA,Y,N,[RFC5489]
+"0xC0,0x37",TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256,Y,N,[RFC5489]
+"0xC0,0x38",TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384,Y,N,[RFC5489]
+"0xC0,0x39",TLS_ECDHE_PSK_WITH_NULL_SHA,Y,N,[RFC5489]
+"0xC0,0x3A",TLS_ECDHE_PSK_WITH_NULL_SHA256,Y,N,[RFC5489]
+"0xC0,0x3B",TLS_ECDHE_PSK_WITH_NULL_SHA384,Y,N,[RFC5489]
+"0xC0,0x3C",TLS_RSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x3D",TLS_RSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x3E",TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x3F",TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x40",TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x41",TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x42",TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x43",TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x44",TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x45",TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x46",TLS_DH_anon_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x47",TLS_DH_anon_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x48",TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x49",TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x4A",TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x4B",TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x4C",TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x4D",TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x4E",TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x4F",TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x50",TLS_RSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x51",TLS_RSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x52",TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x53",TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x54",TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x55",TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x56",TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x57",TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x58",TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x59",TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x5A",TLS_DH_anon_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x5B",TLS_DH_anon_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x5C",TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x5D",TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x5E",TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x5F",TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x60",TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x61",TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x62",TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x63",TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x64",TLS_PSK_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x65",TLS_PSK_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x66",TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x67",TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x68",TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x69",TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x6A",TLS_PSK_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x6B",TLS_PSK_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x6C",TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x6D",TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x6E",TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256,Y,N,[RFC6209]
+"0xC0,0x6F",TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384,Y,N,[RFC6209]
+"0xC0,0x70",TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256,Y,N,[RFC6209]
+"0xC0,0x71",TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384,Y,N,[RFC6209]
+"0xC0,0x72",TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x73",TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x74",TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x75",TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x76",TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x77",TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x78",TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x79",TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x7A",TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x7B",TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x7C",TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x7D",TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x7E",TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x7F",TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x80",TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x81",TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x82",TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x83",TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x84",TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x85",TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x86",TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x87",TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x88",TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x89",TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x8A",TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x8B",TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x8C",TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x8D",TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x8E",TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x8F",TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x90",TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x91",TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x92",TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256,Y,N,[RFC6367]
+"0xC0,0x93",TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384,Y,N,[RFC6367]
+"0xC0,0x94",TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x95",TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x96",TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x97",TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x98",TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x99",TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x9A",TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256,Y,N,[RFC6367]
+"0xC0,0x9B",TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384,Y,N,[RFC6367]
+"0xC0,0x9C",TLS_RSA_WITH_AES_128_CCM,Y,N,[RFC6655]
+"0xC0,0x9D",TLS_RSA_WITH_AES_256_CCM,Y,N,[RFC6655]
+"0xC0,0x9E",TLS_DHE_RSA_WITH_AES_128_CCM,Y,Y,[RFC6655]
+"0xC0,0x9F",TLS_DHE_RSA_WITH_AES_256_CCM,Y,Y,[RFC6655]
+"0xC0,0xA0",TLS_RSA_WITH_AES_128_CCM_8,Y,N,[RFC6655]
+"0xC0,0xA1",TLS_RSA_WITH_AES_256_CCM_8,Y,N,[RFC6655]
+"0xC0,0xA2",TLS_DHE_RSA_WITH_AES_128_CCM_8,Y,N,[RFC6655]
+"0xC0,0xA3",TLS_DHE_RSA_WITH_AES_256_CCM_8,N,N,[RFC6655]
+"0xC0,0xA4",TLS_PSK_WITH_AES_128_CCM,Y,N,[RFC6655]
+"0xC0,0xA5",TLS_PSK_WITH_AES_256_CCM,Y,N,[RFC6655]
+"0xC0,0xA6",TLS_DHE_PSK_WITH_AES_128_CCM,Y,Y,[RFC6655]
+"0xC0,0xA7",TLS_DHE_PSK_WITH_AES_256_CCM,Y,Y,[RFC6655]
+"0xC0,0xA8",TLS_PSK_WITH_AES_128_CCM_8,Y,N,[RFC6655]
+"0xC0,0xA9",TLS_PSK_WITH_AES_256_CCM_8,Y,N,[RFC6655]
+"0xC0,0xAA",TLS_PSK_DHE_WITH_AES_128_CCM_8,Y,N,[RFC6655]
+"0xC0,0xAB",TLS_PSK_DHE_WITH_AES_256_CCM_8,Y,N,[RFC6655]
+"0xC0,0xAC",TLS_ECDHE_ECDSA_WITH_AES_128_CCM,Y,N,[RFC7251]
+"0xC0,0xAD",TLS_ECDHE_ECDSA_WITH_AES_256_CCM,Y,N,[RFC7251]
+"0xC0,0xAE",TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8,Y,N,[RFC7251]
+"0xC0,0xAF",TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8,Y,N,[RFC7251]
+"0xC0,0xB0",TLS_ECCPWD_WITH_AES_128_GCM_SHA256,Y,N,[RFC8492]
+"0xC0,0xB1",TLS_ECCPWD_WITH_AES_256_GCM_SHA384,Y,N,[RFC8492]
+"0xC0,0xB2",TLS_ECCPWD_WITH_AES_128_CCM_SHA256,Y,N,[RFC8492]
+"0xC0,0xB3",TLS_ECCPWD_WITH_AES_256_CCM_SHA384,Y,N,[RFC8492]
+"0xC0,0xB4",TLS_SHA256_SHA256,Y,N,[RFC9150]
+"0xC0,0xB5",TLS_SHA384_SHA384,Y,N,[RFC9150]
+"0xC0,0xB6-FF",Unassigned,,,
+"0xC1,0x00",TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC,N,N,[RFC9189]
+"0xC1,0x01",TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC,N,N,[RFC9189]
+"0xC1,0x02",TLS_GOSTR341112_256_WITH_28147_CNT_IMIT,N,N,[RFC9189]
+"0xC1,0x03",TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L,N,N,[RFC9367]
+"0xC1,0x04",TLS_GOSTR341112_256_WITH_MAGMA_MGM_L,N,N,[RFC9367]
+"0xC1,0x05",TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S,N,N,[RFC9367]
+"0xC1,0x06",TLS_GOSTR341112_256_WITH_MAGMA_MGM_S,N,N,[RFC9367]
+"0xC1,0x07-FF",Unassigned,,,
+"0xC2-C9,*",Unassigned,,,
+"0xCA,0x00-C9",Unassigned,,,
+"0xCA,0xCA",Reserved,Y,N,[RFC8701]
+"0xCA,0xCB-FF",Unassigned,,,
+"0xCB,*",Unassigned,,,
+"0xCC,0x00-A7",Unassigned,,,
+"0xCC,0xA8",TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,Y,Y,[RFC7905]
+"0xCC,0xA9",TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,Y,Y,[RFC7905]
+"0xCC,0xAA",TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,Y,Y,[RFC7905]
+"0xCC,0xAB",TLS_PSK_WITH_CHACHA20_POLY1305_SHA256,Y,N,[RFC7905]
+"0xCC,0xAC",TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256,Y,Y,[RFC7905]
+"0xCC,0xAD",TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256,Y,Y,[RFC7905]
+"0xCC,0xAE",TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256,Y,N,[RFC7905]
+"0xCC,0xAF-FF",Unassigned,,,
+"0xCD-CF,*",Unassigned,,,
+"0xD0,0x00",Unassigned,,,
+"0xD0,0x01",TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256,Y,Y,[RFC8442]
+"0xD0,0x02",TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384,Y,Y,[RFC8442]
+"0xD0,0x03",TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256,Y,N,[RFC8442]
+"0xD0,0x04",Unassigned,,,
+"0xD0,0x05",TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256,Y,Y,[RFC8442]
+"0xD0,0x06-FF",Unassigned,,,
+"0xD1-D9,*",Unassigned,,,
+"0xDA,0x00-D9",Unassigned,,,
+"0xDA,0xDA",Reserved,Y,N,[RFC8701]
+"0xDA,0xDB-FF",Unassigned,,,
+"0xDB-E9,*",Unassigned,,,
+"0xEA,0x00-E9",Unassigned,,,
+"0xEA,0xEA",Reserved,Y,N,[RFC8701]
+"0xEA,0xEB-FF",Unassigned,,,
+"0xEB-F9,*",Unassigned,,,
+"0xFA,0x00-C9",Unassigned,,,
+"0xFA,0xFA",Reserved,Y,N,[RFC8701]
+"0xFA,0xFB-FF",Unassigned,,,
+"0xFB-FD,*",Unassigned,,,
+"0xFE,0x00-FD",Unassigned,,,
+"0xFE,0xFE-FF","Reserved to avoid conflicts with
+widely deployed implementations",,,[Pasi_Eronen]
+"0xFF,0x00-FF",Reserved for Private Use,,,[RFC8446]

format/tls/extensions.go

@@ -0,0 +1,132 @@
+package tls
+
+import "github.com/wader/fq/pkg/scalar"
+
+// https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values-1.csv
+
+//nolint:revive
+const (
+	// fq -d csv -r '.[1:][] | select(.[1] | test("unassigned|reserved";"i") | not) | "extension\(.[1]) = \(.[0] | .[0:4] + . [7:] | ascii_downcase)"' tls-extensiontype-values-1.csv
+	extensionServerName                          = 0
+	extensionMaxFragmentLength                   = 1
+	extensionClientCertificateUrl                = 2
+	extensionTrustedCaKeys                       = 3
+	extensionTruncatedHmac                       = 4
+	extensionStatusRequest                       = 5
+	extensionUserMapping                         = 6
+	extensionClientAuthz                         = 7
+	extensionServerAuthz                         = 8
+	extensionCertType                            = 9
+	extensionSupportedGroups                     = 10
+	extensionEcPointFormats                      = 11
+	extensionSrp                                 = 12
+	extensionSignatureAlgorithms                 = 13
+	extensionUseSrtp                             = 14
+	extensionHeartbeat                           = 15
+	extensionApplicationLayerProtocolNegotiation = 16
+	extensionStatusRequestV2                     = 17
+	extensionSignedCertificateTimestamp          = 18
+	extensionClientCertificateType               = 19
+	extensionServerCertificateType               = 20
+	extensionPadding                             = 21
+	extensionEncryptThenMac                      = 22
+	extensionExtendedMasterSecret                = 23
+	extensionTokenBinding                        = 24
+	extensionCachedInfo                          = 25
+	extensionTlsLts                              = 26
+	extensionCompressCertificate                 = 27
+	extensionRecordSizeLimit                     = 28
+	extensionPwdProtect                          = 29
+	extensionPwdClear                            = 30
+	extensionPasswordSalt                        = 31
+	extensionTicketPinning                       = 32
+	extensionTlsCertWithExternPsk                = 33
+	extensionDelegatedCredentials                = 34
+	extensionSessionTicket                       = 35
+	extensionTLMSP                               = 36
+	extensionTLMSPProxying                       = 37
+	extensionTLMSPDelegate                       = 38
+	extensionSupportedEktCiphers                 = 39
+	extensionPreSharedKey                        = 41
+	extensionEarlyData                           = 42
+	extensionSupportedVersions                   = 43
+	extensionCookie                              = 44
+	extensionPskKeyExchangeModes                 = 45
+	extensionCertificateAuthorities              = 47
+	extensionOidFilters                          = 48
+	extensionPostHandshakeAuth                   = 49
+	extensionSignatureAlgorithmsCert             = 50
+	extensionKeyShare                            = 51
+	extensionTransparencyInfo                    = 52
+	extensionConnectionId53                      = 53 // deprecated
+	extensionConnectionId                        = 54
+	extensionExternalIdHash                      = 55
+	extensionExternalSessionId                   = 56
+	extensionQuicTransportParameters             = 57
+	extensionTicketRequest                       = 58
+	extensionDnssecChain                         = 59
+	extensionRenegotiationInfo                   = 65281
+)
+
+var extensionNames = scalar.UintMapSymStr{
+	// fq -d csv -r '.[1:][] | select(.[1] | test("unassigned|reserved";"i") | not) | "extension\(.[1] | gsub(`(?<c>(?:^|_).)`; .c[-1:] | ascii_upcase)) = \(.[0] | .[0:4] + . [7:] | ascii_downcase)"' tls-extensiontype-values-1.csv
+	extensionServerName:                          "server_name",
+	extensionMaxFragmentLength:                   "max_fragment_length",
+	extensionClientCertificateUrl:                "client_certificate_url",
+	extensionTrustedCaKeys:                       "trusted_ca_keys",
+	extensionTruncatedHmac:                       "truncated_hmac",
+	extensionStatusRequest:                       "status_request",
+	extensionUserMapping:                         "user_mapping",
+	extensionClientAuthz:                         "client_authz",
+	extensionServerAuthz:                         "server_authz",
+	extensionCertType:                            "cert_type",
+	extensionSupportedGroups:                     "supported_groups",
+	extensionEcPointFormats:                      "ec_point_formats",
+	extensionSrp:                                 "srp",
+	extensionSignatureAlgorithms:                 "signature_algorithms",
+	extensionUseSrtp:                             "use_srtp",
+	extensionHeartbeat:                           "heartbeat",
+	extensionApplicationLayerProtocolNegotiation: "application_layer_protocol_negotiation",
+	extensionStatusRequestV2:                     "status_request_v2",
+	extensionSignedCertificateTimestamp:          "signed_certificate_timestamp",
+	extensionClientCertificateType:               "client_certificate_type",
+	extensionServerCertificateType:               "server_certificate_type",
+	extensionPadding:                             "padding",
+	extensionEncryptThenMac:                      "encrypt_then_mac",
+	extensionExtendedMasterSecret:                "extended_master_secret",
+	extensionTokenBinding:                        "token_binding",
+	extensionCachedInfo:                          "cached_info",
+	extensionTlsLts:                              "tls_lts",
+	extensionCompressCertificate:                 "compress_certificate",
+	extensionRecordSizeLimit:                     "record_size_limit",
+	extensionPwdProtect:                          "pwd_protect",
+	extensionPwdClear:                            "pwd_clear",
+	extensionPasswordSalt:                        "password_salt",
+	extensionTicketPinning:                       "ticket_pinning",
+	extensionTlsCertWithExternPsk:                "tls_cert_with_extern_psk",
+	extensionDelegatedCredentials:                "delegated_credentials",
+	extensionSessionTicket:                       "session_ticket",
+	extensionTLMSP:                               "tlmsp",
+	extensionTLMSPProxying:                       "tlmsp_proxying",
+	extensionTLMSPDelegate:                       "tlmsp_delegate",
+	extensionSupportedEktCiphers:                 "supported_ekt_ciphers",
+	extensionPreSharedKey:                        "pre_shared_key",
+	extensionEarlyData:                           "early_data",
+	extensionSupportedVersions:                   "supported_versions",
+	extensionCookie:                              "cookie",
+	extensionPskKeyExchangeModes:                 "psk_key_exchange_modes",
+	extensionCertificateAuthorities:              "certificate_authorities",
+	extensionOidFilters:                          "oid_filters",
+	extensionPostHandshakeAuth:                   "post_handshake_auth",
+	extensionSignatureAlgorithmsCert:             "signature_algorithms_cert",
+	extensionKeyShare:                            "key_share",
+	extensionTransparencyInfo:                    "transparency_info",
+	extensionConnectionId53:                      "connection_id53",
+	extensionConnectionId:                        "connection_id",
+	extensionExternalIdHash:                      "external_id_hash",
+	extensionExternalSessionId:                   "external_session_id",
+	extensionQuicTransportParameters:             "quic_transport_parameters",
+	extensionTicketRequest:                       "ticket_request",
+	extensionDnssecChain:                         "dnssec_chain",
+	extensionRenegotiationInfo:                   "renegotiation_info",
+}

format/tls/keylog/keylog.go

@@ -0,0 +1,101 @@
+// Package keylog parses NSS key log format
+// https://firefox-source-docs.mozilla.org/security/nss/legacy/key_log_format/index.html
+// <Label> <space> <ClientRandom> <space> <Secret> lines
+package keylog
+
+import (
+	"bufio"
+	"encoding/hex"
+	"fmt"
+	"strings"
+)
+
+const (
+	Rsa = iota
+	ClientRandom
+	ClientEarlyTrafficSecret
+	ClientHandshakeTrafficSecret
+	ServerHandshakeTrafficSecret
+	ClientTrafficSecret0
+	ServerTrafficSecret0
+	EarlyExporterSecret
+	ExporterSecret
+)
+
+var labelToEnum = map[string]int{
+	"RSA":                             Rsa,
+	"CLIENT_RANDOM":                   ClientRandom,
+	"CLIENT_EARLY_TRAFFIC_SECRET":     ClientEarlyTrafficSecret,
+	"CLIENT_HANDSHAKE_TRAFFIC_SECRET": ClientHandshakeTrafficSecret,
+	"SERVER_HANDSHAKE_TRAFFIC_SECRET": ServerHandshakeTrafficSecret,
+	"CLIENT_TRAFFIC_SECRET_0":         ClientTrafficSecret0,
+	"SERVER_TRAFFIC_SECRET_0":         ServerTrafficSecret0,
+	"EARLY_EXPORTER_SECRET":           EarlyExporterSecret,
+	"EXPORTER_SECRET":                 ExporterSecret,
+}
+
+type Entry struct {
+	Label        int
+	ClientRandom [32]byte
+}
+
+type Map map[Entry][]byte
+
+func (m Map) Lookup(label int, clientRandom [32]byte) ([]byte, bool) {
+	bs, ok := m[Entry{Label: label, ClientRandom: clientRandom}]
+	return bs, ok
+}
+
+// Parse NSS Key Log format
+//
+// # comment
+// <Label> <space> <ClientRandom> <space> <Secret>
+func Parse(s string) (Map, error) {
+	em := map[Entry][]byte{}
+
+	lines := bufio.NewScanner(strings.NewReader(s))
+	lineNr := 0
+	for lines.Scan() {
+		lineNr++
+		line := strings.TrimSpace(lines.Text())
+
+		if line == "" || strings.HasPrefix(line, "#") {
+			continue
+		}
+		parts := strings.Split(line, " ")
+		if len(parts) != 3 {
+			continue
+			// return nil, fmt.Errorf("parse error %d: %s", lineNr, line)
+		}
+
+		label, labelOk := labelToEnum[parts[0]]
+		if !labelOk {
+			// return nil, fmt.Errorf("unknown label %d: %s", lineNr, parts[0])
+			continue
+		}
+
+		clientRandom, clientRandomErr := hex.DecodeString(parts[1])
+		if clientRandomErr != nil {
+			return nil, fmt.Errorf("client random error %d: %w", lineNr, clientRandomErr)
+		}
+		if len(clientRandom) != 32 {
+			return nil, fmt.Errorf("client random not 32 bytes%d: %s (%d)", lineNr, clientRandom, len(clientRandom))
+		}
+
+		value, valueErr := hex.DecodeString(parts[2])
+		if valueErr != nil {
+			return nil, fmt.Errorf("value random error %d: %w", lineNr, valueErr)
+		}
+
+		e := Entry{Label: label}
+		copy(e.ClientRandom[:], clientRandom)
+
+		if _, ok := em[e]; ok {
+			return nil, fmt.Errorf("duplicate client random %d: %s", lineNr, line)
+		}
+
+		em[e] = value
+	}
+
+	return em, nil
+}

format/tls/keylog/keylog_test.go

@@ -0,0 +1,63 @@
+package keylog_test
+
+import (
+	"os"
+	"reflect"
+	"testing"
+
+	"github.com/wader/fq/format/tls/keylog"
+)
+
+func TestParse(t *testing.T) {
+	b, err := os.ReadFile("testdata/keylog.txt")
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	actual, err := keylog.Parse(string(b))
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	expected := keylog.Map{
+		keylog.Entry{
+			Label: keylog.ClientRandom,
+			ClientRandom: [32]uint8{
+				0x52, 0x36, 0x2c, 0x10, 0x12, 0xcf, 0x23, 0x62, 0x82, 0x56, 0xe7, 0x45, 0xe9, 0x03, 0xce, 0xa6,
+				0x96, 0xe9, 0xf6, 0x2a, 0x60, 0xba, 0x0a, 0xe8, 0x31, 0x1d, 0x70, 0xde, 0xa5, 0xe4, 0x19, 0x49,
+			},
+		}: []uint8{
+			0x9f, 0x9a, 0x0f, 0x19, 0xa0, 0x2b, 0xdd, 0xbe, 0x1a, 0x05, 0x92, 0x65, 0x97, 0xd6, 0x22, 0xcc,
+			0xa0, 0x6d, 0x2a, 0xf4, 0x16, 0xa2, 0x8a, 0xd9, 0xc0, 0x31, 0x63, 0xb8, 0x7f, 0xf1, 0xb0, 0xc6,
+			0x78, 0x24, 0xbb, 0xdb, 0x59, 0x5b, 0x32, 0xd8, 0x02, 0x7d, 0xb5, 0x66, 0xec, 0x04, 0xfb, 0x25,
+		},
+		keylog.Entry{
+			Label: keylog.ClientRandom,
+			ClientRandom: [32]uint8{
+				0x52, 0x36, 0x2c, 0x10, 0xa2, 0x66, 0x5e, 0x32, 0x3a, 0x2a, 0xdb, 0x4b, 0x9d, 0xa0, 0xc1, 0xd,
+				0x4a, 0x88, 0x23, 0x71, 0x92, 0x72, 0xf8, 0xb4, 0xc9, 0x7a, 0xf2, 0x4f, 0x92, 0x78, 0x48, 0x12,
+			},
+		}: []uint8{
+			0x9f, 0x9a, 0x0f, 0x19, 0xa0, 0x2b, 0xdd, 0xbe, 0x1a, 0x05, 0x92, 0x65, 0x97, 0xd6, 0x22, 0xcc,
+			0xa0, 0x6d, 0x2a, 0xf4, 0x16, 0xa2, 0x8a, 0xd9, 0xc0, 0x31, 0x63, 0xb8, 0x7f, 0xf1, 0xb0, 0xc6,
+			0x78, 0x24, 0xbb, 0xdb, 0x59, 0x5b, 0x32, 0xd8, 0x02, 0x7d, 0xb5, 0x66, 0xec, 0x04, 0xfb, 0x25,
+		},
+	}
+
+	if !reflect.DeepEqual(expected, actual) {
+		t.Errorf("expected %+#v, got %+#v", expected, actual)
+	}
+}
+
+func TestParseErr(t *testing.T) {
+	_, err := keylog.Parse("nonsense")
+	if err != nil {
+		t.Errorf("should ignore nonsense")
+	}
+}
+func TestParseErr2(t *testing.T) {
+	_, err := keylog.Parse("CLIENT_RANDOM 1234 1234")
+	if err == nil {
+		t.Errorf("expected CLIENT_RANDOM parse error")
+	}
+}

format/tls/keylog/testdata/keylog.txt

@@ -0,0 +1,5 @@
+# comment
+
+CLIENT_RANDOM 52362c10a2665e323a2adb4b9da0c10d4a8823719272f8b4c97af24f92784812 9F9A0F19A02BDDBE1A05926597D622CCA06D2AF416A28AD9C03163B87FF1B0C67824BBDB595B32D8027DB566EC04FB25
+
+CLIENT_RANDOM 52362c1012cf23628256e745e903cea696e9f62a60ba0ae8311d70dea5e41949 9F9A0F19A02BDDBE1A05926597D622CCA06D2AF416A28AD9C03163B87FF1B0C67824BBDB595B32D8027DB566EC04FB25

format/tls/rezlib/reinflate.go

@@ -0,0 +1,90 @@
+// Package rezlib wraps a zlib reader and makes it possible to read
+// until the last current input flush boundary by reading until EOF.
+//
+// Inspiration from https://github.com/golang/go/issues/48877
+//
+// TODO: force deflate only?
+//
+// This is used by TLS deflate (seems be zlib?) where a flush is done
+// between each record
+package rezlib
+
+import (
+	"bytes"
+	"compress/zlib"
+	"errors"
+	"fmt"
+	"io"
+)
+
+// max deflate dictionary size
+const maxDictSize = 1 << 15 // 32KiB
+
+type Reader struct {
+	r                io.Reader
+	fr               io.Reader
+	res              zlib.Resetter
+	currentDict      bytes.Buffer
+	zlibHeader       [2]byte
+	hadUnexpectedEOF bool
+}
+
+func NewReader(r io.Reader) (*Reader, error) {
+	var zlibHeader [2]byte
+	if _, err := io.ReadFull(r, zlibHeader[:]); err != nil {
+		return nil, err
+	}
+
+	zr, zrErr := zlib.NewReader(io.MultiReader(
+		bytes.NewBuffer(zlibHeader[:]),
+		r,
+	))
+	if zrErr != nil {
+		return nil, zrErr
+	}
+
+	res, resOk := zr.(zlib.Resetter)
+	if !resOk {
+		panic("zlib reader not a Resetter")
+	}
+
+	return &Reader{
+		r:          r,
+		fr:         zr,
+		res:        res,
+		zlibHeader: zlibHeader,
+	}, nil
+}
+
+func (r *Reader) Read(b []byte) (int, error) {
+	if r.hadUnexpectedEOF {
+		r.hadUnexpectedEOF = false
+		// inject zlib header again
+		mr := io.MultiReader(
+			bytes.NewReader(r.zlibHeader[:]),
+			r.r,
+		)
+		if err := r.res.Reset(mr, r.currentDict.Bytes()); err != nil {
+			panic(fmt.Sprintf("zlib reader could not reset %s", err))
+		}
+	}
+
+	n, err := r.fr.Read(b)
+
+	r.currentDict.Write(b[:n])
+	l := r.currentDict.Len()
+	if l > maxDictSize {
+		r.currentDict.Next(l - maxDictSize)
+	}
+
+	// TODO: currently we assume ErrUnexpectedEOF means we have read
+	// until a flush boundary. To get read of the error reset with
+	// current dictionary
+	// some better way?
+	if errors.Is(err, io.ErrUnexpectedEOF) {
+		r.hadUnexpectedEOF = true
+		err = io.EOF
+	}
+
+	return n, err
+}

format/tls/testdata/README.md

@@ -0,0 +1,5 @@
+dump.pcapng dump-broken.pcapng was created by Peter Wu and comes from https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9144.
+
+dump.pcapng contains 73 tls connections with differens cipher suites. split.jq was used to split it into one pcap per connection named after cipher suit used.
+
+dump-broken.pcapng is a broken SSL v3, uses extensions. dump-broken.pcapng.keylog not used yet.

format/tls/testdata/ciphers/TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA.pcap.fqtest

@@ -0,0 +1,475 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe84-NA (0)
+          |                                               |                |  client{}: 0xe84-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe84-NA (0)
+          |                                               |                |    port: 56774 0xe84-NA (0)
+          |                                               |                |    has_start: true 0xe84-NA (0)
+          |                                               |                |    has_end: false 0xe84-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe84-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             89|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|98 58 78 05 69 01 b3 f3 98 c6 c9 12 68 fc fd 21|.Xx.i.......h..!|
+  0x000002|a6 f6 32 82 ee 18 d9 75 0f bb 50               |..2....u..P     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 11|              ..|              [0]: "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA" (0x11) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+  0x000006|                                             00|               .|            data: raw bits 0x6f-0xb0.7 (66)
+  0x000007|40 12 33 67 73 e4 a8 1b 1e b4 35 07 dd a6 2f 73|@.3gs.....5.../s|
+  *       |until 0xb0.7 (66)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    c6 fa 6f 48|            ..oH|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|f8 81 1b 97 f7 1f 5c 09 99 94 ef 03 24 77 2e 13|......\.....$w..|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5f 0a f3 d6 75 4c 1b b0 5d 56 4c f7|    _...uL..]VL.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           c9 e8 5b 08 02 d3 c1|         ..[....|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|df 65 f3 cc ae 5b 54 9f 54 8e 71 93 b3 78 82 d7|.e...[T.T.q..x..|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  39 78 2d a5 81 b0 c6 0a 90 13|      9x-.......|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|18 4e 36 fb cf 47 c6 c0 29 45 05 d2 d0 87 8f 02|.N6..G..)E......|
+  0x000015|41 e7 b1 23 03 fe 2a bd ef c7 a0 c8 9f 72|     |A..#..*......r| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe84-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe84-NA (0)
+          |                                               |                |    port: 4433 0xe84-NA (0)
+          |                                               |                |    has_start: true 0xe84-NA (0)
+          |                                               |                |    has_end: true 0xe84-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe84-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x90d.7 (2318)
+          |                                               |                |      records[0:8]: 0x0-0x90d.7 (2318)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             28|               (|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|d9 0f ec b2 64 41 d1 6d 40 37 7a 8b 21 b0 42 03|....dA.m@7z.!.B.|
+  0x000002|9b b7 34 e2 84 ac 88 12 6d 57 3d               |..4.....mW=     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 11      |            ..  |            cipher_suit: "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA" (0x11) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 99 1e|........K.K.....|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x480.7 (61)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 38                     |       .8       |          length: 56 0x447-0x448.7 (2)
+  0x000044|                           1f 43 7f fb 6a a2 c7|         .C..j..|          encrypted_data: raw bits 0x449-0x480.7 (56)
+  0x000045|3a f7 d5 ca 62 d2 0b 35 27 31 6a 04 1f 38 50 cc|:...b..5'1j..8P.|
+  *       |until 0x480.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            62 03 cd 63 d6 fe 9e 79 c6 34 99 fa|    b..c...y.4..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x481-0x90d.7 (1165)
+  0x000048|   17                                          | .              |          type: "application_data" (23) (valid) 0x481-0x481.7 (1)
+  0x000048|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x482-0x483.7 (2)
+  0x000048|            04 88                              |    ..          |          length: 1160 0x484-0x485.7 (2)
+  0x000048|                  ca 85 fe 40 84 4f 6e 43 93 22|      ...@.OnC."|          encrypted_data: raw bits 0x486-0x90d.7 (1160)
+  0x000049|66 5e 1b d5 29 6e 74 13 bb d7 1b 5e 4b 10 6a 48|f^..)nt....^K.jH|
+  *       |until 0x90d.7 (end) (1160)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.pcap.fqtest

@@ -0,0 +1,477 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe7d-NA (0)
+          |                                               |                |  client{}: 0xe7d-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe7d-NA (0)
+          |                                               |                |    port: 56732 0xe7d-NA (0)
+          |                                               |                |    has_start: true 0xe7d-NA (0)
+          |                                               |                |    has_end: false 0xe7d-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe7d-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             f8|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|a5 ac ee 04 c8 89 00 c4 b0 b9 65 e7 5c 90 70 45|..........e.\.pE|
+  0x000002|84 14 40 02 09 2f 79 be 71 71 b8               |..@../y.qq.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 13|              ..|              [0]: "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA" (0x13) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   d0 1f 1a d1 cd 73 2e f0 02 67 6a 38 7d 41 f6| .....s...gj8}A.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|e1 46 eb 37 25 68 a8 54 8c e1 df 88 d2 c9 2d e3|.F.7%h.T......-.|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    da 36 b7 37|            .6.7|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|b6 f9 55 44 14 b9 41 9d 0b 1e 07 55 e3 2b 54 03|..UD..A....U.+T.|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            6f b1 2d 63 59 1f 31 51 f8 77 72 e9|    o.-cY.1Q.wr.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           1d d5 94 e6 4d 3b 48|         ....M;H|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|74 e7 58 ee e8 3c ee 51 99 93 63 43 f6 8e 80 21|t.X..<.Q..cC...!|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  fe d7 de 52 81 24 6b bd ab 86|      ...R.$k...|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|25 79 6f 83 a8 78 68 ae 01 20 da 7d a7 2c 95 fd|%yo..xh.. .}.,..|
+  0x000015|17 d4 98 fd a4 36 3d b9 80 5d 22 fc 5d 44|     |.....6=..]".]D| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe7d-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe7d-NA (0)
+          |                                               |                |    port: 4433 0xe7d-NA (0)
+          |                                               |                |    has_start: true 0xe7d-NA (0)
+          |                                               |                |    has_end: true 0xe7d-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe7d-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x906.7 (2311)
+          |                                               |                |      records[0:8]: 0x0-0x906.7 (2311)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             ff|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|7b c1 bc 54 87 39 2e a0 09 31 e1 c4 32 fd 5e 1d|{..T.9...1..2.^.|
+  0x000002|58 39 7f 85 2e 96 52 80 18 33 a7               |X9....R..3.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 13      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA" (0x13) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x386.7 (195)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 be                     |       ..       |          length: 190 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x386.7 (190)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 ba         |          ...   |            length: 186 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x386.7 (186)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x386.7 (186)                            |                |
+          |                                               |                |        [3]{}: record 0x387-0x38f.7 (9)
+  0x000038|                     16                        |       .        |          type: "handshake" (22) (valid) 0x387-0x387.7 (1)
+  0x000038|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x388-0x389.7 (2)
+  0x000038|                              00 04            |          ..    |          length: 4 0x38a-0x38b.7 (2)
+          |                                               |                |          message{}: 0x38c-0x38f.7 (4)
+  0x000038|                                    0e         |            .   |            type: "server_hello_done" (14) 0x38c-0x38c.7 (1)
+  0x000038|                                       00 00 00|             ...|            length: 0 0x38d-0x38f.7 (3)
+          |                                               |                |            data: raw bits 0x390-NA (0)
+          |                                               |                |        [4]{}: record 0x390-0x43e.7 (175)
+  0x000039|16                                             |.               |          type: "handshake" (22) (valid) 0x390-0x390.7 (1)
+  0x000039|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x391-0x392.7 (2)
+  0x000039|         00 aa                                 |   ..           |          length: 170 0x393-0x394.7 (2)
+          |                                               |                |          message{}: 0x395-0x43e.7 (170)
+  0x000039|               04                              |     .          |            type: "new_session_ticket" (4) 0x395-0x395.7 (1)
+  0x000039|                  00 00 a6                     |      ...       |            length: 166 0x396-0x398.7 (3)
+  0x000039|                           00 00 01 2c         |         ...,   |            lifetime_hint: 300 0x399-0x39c.7 (4)
+  0x000039|                                       00 a0   |             .. |            ticket_length: 160 0x39d-0x39e.7 (2)
+  0x000039|                                             22|               "|            ticket: raw bits 0x39f-0x43e.7 (160)
+  0x00003a|07 b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 15|.........K.K....|
+  *       |until 0x43e.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43f-0x444.7 (6)
+  0x000043|                                             14|               .|          type: "change_cipher_spec" (20) (valid) 0x43f-0x43f.7 (1)
+  0x000044|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x440-0x441.7 (2)
+  0x000044|      00 01                                    |  ..            |          length: 1 0x442-0x443.7 (2)
+          |                                               |                |          message{}: 0x444-0x444.7 (1)
+  0x000044|            01                                 |    .           |            type: 1 0x444-0x444.7 (1)
+          |                                               |                |        [6]{}: record 0x445-0x481.7 (61)
+  0x000044|               16                              |     .          |          type: "handshake" (22) (valid) 0x445-0x445.7 (1)
+  0x000044|                  03 03                        |      ..        |          version: "tls1.2" (0x303) (valid) 0x446-0x447.7 (2)
+  0x000044|                        00 38                  |        .8      |          length: 56 0x448-0x449.7 (2)
+  0x000044|                              b4 73 16 50 ba 72|          .s.P.r|          encrypted_data: raw bits 0x44a-0x481.7 (56)
+  0x000045|13 3f b3 cc bb ff 48 f6 56 97 2e 18 ec 89 5d f0|.?....H.V.....].|
+  *       |until 0x481.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            67 4c fc 85 2b 22 1e 0c 5a 7c 52 89|    gL..+"..Z|R.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x482-0x906.7 (1157)
+  0x000048|      17                                       |  .             |          type: "application_data" (23) (valid) 0x482-0x482.7 (1)
+  0x000048|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x483-0x484.7 (2)
+  0x000048|               04 80                           |     ..         |          length: 1152 0x485-0x486.7 (2)
+  0x000048|                     6c c6 2e 2e 61 d3 d2 1e 0e|       l...a....|          encrypted_data: raw bits 0x487-0x906.7 (1152)
+  0x000049|64 55 56 3e d6 32 26 92 83 cf 33 2c 37 c3 90 6b|dUV>.2&...3,7..k|
+  *       |until 0x906.7 (end) (1152)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,479 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xeac-NA (0)
+          |                                               |                |  client{}: 0xeac-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+          |                                               |                |    port: 56747 0xeac-NA (0)
+          |                                               |                |    has_start: true 0xeac-NA (0)
+          |                                               |                |    has_end: false 0xeac-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+          |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             17|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|e3 3e 4c 7e 17 a2 fc bc a4 b0 05 9a 3e 8e a6 e7|.>L~........>...|
+  0x000002|c4 bf e2 c8 79 da 6f f3 ae 32 cd               |....y.o..2.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 32|              .2|              [0]: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA" (0x32) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   bf b2 c8 1e 07 b1 fa 24 0d 34 be 1c 23 06 e2| .......$.4..#..|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|a7 7a 56 4a 7c 86 d8 6f 4c 93 c1 e1 d8 db 0f 02|.zVJ|..oL.......|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00000b|                                    48 b3 c9 87|            H...|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00000c|41 49 e5 55 b4 a8 f4 49 e6 f4 c2 d1 31 6e 26 5e|AI.U...I....1n&^|
+  *       |until 0xfb.7 (64)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            45 65 1a 46 5b e0 06 fb 5e 59 67 bb|    Ee.F[...^Yg.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00000f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00000f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00000f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x000010|40                                             |@               |
+  0x000010|   a7 cb 9c 53 92 67 48 0c f3 61 14 8b eb 0a 0b| ...S.gH..a.....|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x000011|d1 a0 37 be 8e 38 0c 1f 1b f6 c8 d8 f9 ef b2 03|..7..8..........|
+  *       |until 0x140.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x000014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x000014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x000014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x000014|                  08 34 f9 b6 e3 33 b4 85 dc a3|      .4...3....|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x000015|dd 19 67 b4 98 53 a1 e6 eb cc bc cc 56 63 f1 39|..g..S......Vc.9|
+  *       |until 0x175.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xeac-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+          |                                               |                |    port: 4433 0xeac-NA (0)
+          |                                               |                |    has_start: true 0xeac-NA (0)
+          |                                               |                |    has_end: true 0xeac-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x91d.7 (2334)
+          |                                               |                |      records[0:8]: 0x0-0x91d.7 (2334)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             5b|               [|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|4b 83 c2 68 05 89 95 66 3e 93 06 1f 81 18 c1 cb|K..h...f>.......|
+  0x000002|35 79 cc 68 c0 68 f4 57 08 05 ff               |5y.h.h.W...     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 32      |            .2  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA" (0x32) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 04 e0|........K.K.....|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x488.7 (69)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 40                     |       .@       |          length: 64 0x447-0x448.7 (2)
+  0x000044|                           84 51 80 29 87 82 0e|         .Q.)...|          encrypted_data: raw bits 0x449-0x488.7 (64)
+  0x000045|1a 4c 39 0f 9b 13 f1 c4 f5 be f2 81 58 de 77 f5|.L9.........X.w.|
+  *       |until 0x488.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            06 0f 15 ee 12 ad 38 83 ae df 63 23|    ......8...c#|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x489-0x91d.7 (1173)
+  0x000048|                           17                  |         .      |          type: "application_data" (23) (valid) 0x489-0x489.7 (1)
+  0x000048|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x48a-0x48b.7 (2)
+  0x000048|                                    04 90      |            ..  |          length: 1168 0x48c-0x48d.7 (2)
+  0x000048|                                          82 8f|              ..|          encrypted_data: raw bits 0x48e-0x91d.7 (1168)
+  0x000049|84 dc d8 e7 05 b0 47 ad f4 18 6f cf 1f 03 e6 fa|......G...o.....|
+  *       |until 0x91d.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1129.7 (4394)
+    *     |until 0x1129.7 (end) (4394)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1129.7 (4394)
+    *     |until 0x1129.7 (end) (4394)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,479 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xefc-NA (0)
+          |                                               |                |  client{}: 0xefc-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xefc-NA (0)
+          |                                               |                |    port: 56745 0xefc-NA (0)
+          |                                               |                |    has_start: true 0xefc-NA (0)
+          |                                               |                |    has_end: false 0xefc-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xefc-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1a5.7 (422)
+          |                                               |                |      records[0:6]: 0x0-0x1a5.7 (422)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             1f|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|08 33 be 8d e4 10 55 a1 2b 88 41 87 99 d4 9e 9b|.3....U.+.A.....|
+  0x000002|47 b1 be 30 f5 44 47 6b b9 93 0e               |G..0.DGk...     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 40|              .@|              [0]: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256" (0x40) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   79 bb be a8 83 0a 51 a2 8a ef a6 12 6a ee 05| y.....Q.....j..|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|78 51 a4 cc b6 29 ab a6 7a 88 87 a1 ee 55 44 fe|xQ...)..z....UD.|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0x10b.7 (85)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 50            |          .P    |          length: 80 0xba-0xbb.7 (2)
+  0x00000b|                                    4b 38 5b 9a|            K8[.|          encrypted_data: raw bits 0xbc-0x10b.7 (80)
+  0x00000c|ac 36 b0 89 ba f1 e7 4c 4d 05 e6 3d 31 d6 15 a5|.6.....LM..=1...|
+  *       |until 0x10b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            25 07 da f5 b0 cc 0d 14 8e 32 47 0d|    %........2G.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x10c-0x160.7 (85)
+  0x000010|                                    17         |            .   |          type: "application_data" (23) (valid) 0x10c-0x10c.7 (1)
+  0x000010|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x10d-0x10e.7 (2)
+  0x000010|                                             00|               .|          length: 80 0x10f-0x110.7 (2)
+  0x000011|50                                             |P               |
+  0x000011|   8f 78 7b cf b7 ce 2f 8e d0 44 95 8c a0 01 c6| .x{.../..D.....|          encrypted_data: raw bits 0x111-0x160.7 (80)
+  0x000012|fe 9b f0 00 2a 8d 91 d7 8a 0e 3c 7b 19 9c fd 40|....*.....<{...@|
+  *       |until 0x160.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x161-0x1a5.7 (69)
+  0x000016|   15                                          | .              |          type: "alert" (21) (valid) 0x161-0x161.7 (1)
+  0x000016|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x162-0x163.7 (2)
+  0x000016|            00 40                              |    .@          |          length: 64 0x164-0x165.7 (2)
+  0x000016|                  d8 bb bb 38 f9 57 c0 82 c0 d6|      ...8.W....|          encrypted_data: raw bits 0x166-0x1a5.7 (64)
+  0x000017|af 1b f9 8f 61 7c 87 05 43 7f 42 cb e3 ce 08 d6|....a|..C.B.....|
+  *       |until 0x1a5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xefc-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xefc-NA (0)
+          |                                               |                |    port: 4433 0xefc-NA (0)
+          |                                               |                |    has_start: true 0xefc-NA (0)
+          |                                               |                |    has_end: true 0xefc-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xefc-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x93d.7 (2366)
+          |                                               |                |      records[0:8]: 0x0-0x93d.7 (2366)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             31|               1|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|e9 49 82 5b 5e 1a 55 a0 53 01 9f eb d9 d6 db 0a|.I.[^.U.S.......|
+  0x000002|6c 5f 1f 60 5f d5 37 20 50 2a f9               |l_.`_.7 P*.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 40      |            .@  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256" (0x40) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e ea 94|........K.K.....|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x498.7 (85)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 50                     |       .P       |          length: 80 0x447-0x448.7 (2)
+  0x000044|                           96 58 00 dd ea e2 57|         .X....W|          encrypted_data: raw bits 0x449-0x498.7 (80)
+  0x000045|9b c9 98 65 f5 af 7e 3b 41 de 40 d3 77 e0 39 a2|...e..~;A.@.w.9.|
+  *       |until 0x498.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            b4 40 a6 08 29 b5 4d 5e d5 4c 13 10|    .@..).M^.L..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x499-0x93d.7 (1189)
+  0x000049|                           17                  |         .      |          type: "application_data" (23) (valid) 0x499-0x499.7 (1)
+  0x000049|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x49a-0x49b.7 (2)
+  0x000049|                                    04 a0      |            ..  |          length: 1184 0x49c-0x49d.7 (2)
+  0x000049|                                          21 74|              !t|          encrypted_data: raw bits 0x49e-0x93d.7 (1184)
+  0x00004a|ec 33 92 24 81 62 92 97 70 5b 3a 47 4b ba 73 90|.3.$.b..p[:GK.s.|
+  *       |until 0x93d.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_GCM_SHA256.pcap.fqtest

@@ -0,0 +1,478 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_GCM_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe58-NA (0)
+          |                                               |                |  client{}: 0xe58-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe58-NA (0)
+          |                                               |                |    port: 56742 0xe58-NA (0)
+          |                                               |                |    has_start: true 0xe58-NA (0)
+          |                                               |                |    has_end: false 0xe58-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe58-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x146.7 (327)
+          |                                               |                |      records[0:6]: 0x0-0x146.7 (327)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             33|               3|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ea 00 c0 a5 9e 71 cf 5b 5e 86 ce 44 a5 8d a2 61|.....q.[^..D...a|
+  0x000002|33 6b bf a7 ab 6a 70 8f ff 41 4f               |3k...jp..AO     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 a2|              ..|              [0]: "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256" (0xa2) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   55 a7 d2 79 01 54 fe 33 ac c5 8c ca a7 a5 00| U..y.T.3.......|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|37 42 cb 48 fa 00 f3 f3 38 a4 07 1e 49 5b 84 e1|7B.H....8...I[..|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xec.7 (54)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 31            |          .1    |          length: 49 0xba-0xbb.7 (2)
+  0x00000b|                                    c7 72 71 0f|            .rq.|          encrypted_data: raw bits 0xbc-0xec.7 (49)
+  0x00000c|2b b9 ac 5c ed 88 1d 6c 55 98 90 6a ea 43 65 75|+..\...lU..j.Ceu|
+  *       |until 0xec.7 (49)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            e7 39 05 46 e5 2f e1 b9 f2 1c 47 28|    .9.F./....G(|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xed-0x121.7 (53)
+  0x00000e|                                       17      |             .  |          type: "application_data" (23) (valid) 0xed-0xed.7 (1)
+  0x00000e|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0xee-0xef.7 (2)
+  0x00000f|00 30                                          |.0              |          length: 48 0xf0-0xf1.7 (2)
+  0x00000f|      c7 72 71 0f 2b b9 ac 5d d4 5f ae 45 ec 4e|  .rq.+..]._.E.N|          encrypted_data: raw bits 0xf2-0x121.7 (48)
+  0x000010|91 0d 81 7c 6e 48 72 e4 5c 6d 7e 7a 80 3d 9c 0a|...|nHr.\m~z.=..|
+  *       |until 0x121.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x122-0x146.7 (37)
+  0x000012|      15                                       |  .             |          type: "alert" (21) (valid) 0x122-0x122.7 (1)
+  0x000012|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x123-0x124.7 (2)
+  0x000012|               00 20                           |     .          |          length: 32 0x125-0x126.7 (2)
+  0x000012|                     c7 72 71 0f 2b b9 ac 5e 1a|       .rq.+..^.|          encrypted_data: raw bits 0x127-0x146.7 (32)
+  0x000013|ee 22 f2 c0 4e 21 61 bd 81 de 5f bc d1 cf 98 49|."..N!a..._....I|
+  0x000014|94 8f 09 8e 3c cf 52|                          |....<.R|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe58-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe58-NA (0)
+          |                                               |                |    port: 4433 0xe58-NA (0)
+          |                                               |                |    has_start: true 0xe58-NA (0)
+          |                                               |                |    has_end: true 0xe58-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe58-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8f8.7 (2297)
+          |                                               |                |      records[0:8]: 0x0-0x8f8.7 (2297)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             f9|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|e4 a1 77 68 3b 92 f0 0c 68 35 07 c3 8a cb 61 1e|..wh;...h5....a.|
+  0x000002|cf 27 e8 01 70 6e 5f e9 c1 e0 05               |.'..pn_....     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 a2      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256" (0xa2) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 24 1a|........K.K...$.|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x479.7 (54)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 31                     |       .1       |          length: 49 0x447-0x448.7 (2)
+  0x000044|                           d3 d2 c0 0f 0f 24 e9|         .....$.|          encrypted_data: raw bits 0x449-0x479.7 (49)
+  0x000045|7b aa 12 8b 57 f5 86 bc b8 b2 98 e6 c4 0c be 0c|{...W...........|
+  *       |until 0x479.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            03 7a 9a 75 b5 32 57 8e 18 fa 52 eb|    .z.u.2W...R.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x47a-0x8f8.7 (1151)
+  0x000047|                              17               |          .     |          type: "application_data" (23) (valid) 0x47a-0x47a.7 (1)
+  0x000047|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x47b-0x47c.7 (2)
+  0x000047|                                       04 7a   |             .z |          length: 1146 0x47d-0x47e.7 (2)
+  0x000047|                                             d3|               .|          encrypted_data: raw bits 0x47f-0x8f8.7 (1146)
+  0x000048|d2 c0 0f 0f 24 e9 7c 11 df c9 35 ed 61 ba 53 1a|....$.|...5.a.S.|
+  *       |until 0x8f8.7 (end) (1146)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,479 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xeac-NA (0)
+          |                                               |                |  client{}: 0xeac-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+          |                                               |                |    port: 56716 0xeac-NA (0)
+          |                                               |                |    has_start: true 0xeac-NA (0)
+          |                                               |                |    has_end: false 0xeac-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+          |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             04|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|3a d6 4a a6 98 c1 da 4e 66 02 ed 53 02 f6 bc 89|:.J....Nf..S....|
+  0x000002|20 fd 23 91 4a 27 6b 3b ac 48 7b               | .#.J'k;.H{     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 38|              .8|              [0]: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA" (0x38) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   84 3c fe 02 69 25 bf 22 e1 92 67 53 c0 bc 6d| .<..i%."..gS..m|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|b6 8a 4f e7 6f 2b 16 14 dc aa 7f ae 82 f4 80 c7|..O.o+..........|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00000b|                                    cc a5 64 da|            ..d.|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00000c|e2 6c bc 10 e6 d5 70 ec f0 cb 1e 8e 45 6d 50 0c|.l....p.....EmP.|
+  *       |until 0xfb.7 (64)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            1b c4 26 0d 2b d2 11 45 23 fe 4e 44|    ..&.+..E#.ND|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00000f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00000f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00000f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x000010|40                                             |@               |
+  0x000010|   73 09 dc 56 3c 29 59 a6 93 52 0b 01 d6 84 b6| s..V<)Y..R.....|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x000011|39 c6 99 ea 04 6c 37 1b ea 7b 6d 9d 56 c2 f1 6f|9....l7..{m.V..o|
+  *       |until 0x140.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x000014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x000014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x000014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x000014|                  66 26 94 65 3d 69 36 af 3f c0|      f&.e=i6.?.|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x000015|57 2f d8 da 4c 85 88 3d 28 a7 e5 55 94 fe f2 28|W/..L..=(..U...(|
+  *       |until 0x175.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xeac-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+          |                                               |                |    port: 4433 0xeac-NA (0)
+          |                                               |                |    has_start: true 0xeac-NA (0)
+          |                                               |                |    has_end: true 0xeac-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x91d.7 (2334)
+          |                                               |                |      records[0:8]: 0x0-0x91d.7 (2334)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             a2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|62 06 ee 0d 90 f7 ad 1c 72 b6 f3 9e 08 f1 65 71|b.......r.....eq|
+  0x000002|25 39 fe 6d ff f7 6e 6d 3c 9a af               |%9.m..nm<..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 38      |            .8  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA" (0x38) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 62 60|........K.K...b`|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x488.7 (69)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 40                     |       .@       |          length: 64 0x447-0x448.7 (2)
+  0x000044|                           12 82 5c 12 c1 0c b2|         ..\....|          encrypted_data: raw bits 0x449-0x488.7 (64)
+  0x000045|68 3c 16 d7 56 c2 e3 31 91 90 b0 ad 28 6b 03 02|h<..V..1....(k..|
+  *       |until 0x488.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            e9 24 02 4c 7f 4d a0 6f 9d 61 a9 40|    .$.L.M.o.a.@|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x489-0x91d.7 (1173)
+  0x000048|                           17                  |         .      |          type: "application_data" (23) (valid) 0x489-0x489.7 (1)
+  0x000048|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x48a-0x48b.7 (2)
+  0x000048|                                    04 90      |            ..  |          length: 1168 0x48c-0x48d.7 (2)
+  0x000048|                                          df 93|              ..|          encrypted_data: raw bits 0x48e-0x91d.7 (1168)
+  0x000049|73 c1 38 d7 66 b3 6a 3b 07 11 a1 fa 5e 34 f8 70|s.8.f.j;....^4.p|
+  *       |until 0x91d.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1129.7 (4394)
+    *     |until 0x1129.7 (end) (4394)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1129.7 (4394)
+    *     |until 0x1129.7 (end) (4394)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,479 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xefc-NA (0)
+          |                                               |                |  client{}: 0xefc-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xefc-NA (0)
+          |                                               |                |    port: 56714 0xefc-NA (0)
+          |                                               |                |    has_start: true 0xefc-NA (0)
+          |                                               |                |    has_end: false 0xefc-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xefc-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1a5.7 (422)
+          |                                               |                |      records[0:6]: 0x0-0x1a5.7 (422)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             a3|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|b4 e9 82 46 0e d0 98 08 6a 76 c9 6b 4e c7 bf f2|...F....jv.kN...|
+  0x000002|93 a8 5f d1 3f 61 82 9b 60 3e 40               |.._.?a..`>@     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 6a|              .j|              [0]: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256" (0x6a) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   af e1 f2 98 ef 9a 83 8a 86 f3 1b 9e 9f 76 9c| .............v.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|db 94 f5 6f 97 93 ed 4a 41 43 25 06 5e 8d df ae|...o...JAC%.^...|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0x10b.7 (85)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 50            |          .P    |          length: 80 0xba-0xbb.7 (2)
+  0x00000b|                                    fb 4e 82 cc|            .N..|          encrypted_data: raw bits 0xbc-0x10b.7 (80)
+  0x00000c|4d 62 7d 9f df 7e 98 32 f1 15 c9 3d 99 4a 44 4c|Mb}..~.2...=.JDL|
+  *       |until 0x10b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            01 19 5b 93 73 cc d1 b4 c6 19 fb a6|    ..[.s.......|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x10c-0x160.7 (85)
+  0x000010|                                    17         |            .   |          type: "application_data" (23) (valid) 0x10c-0x10c.7 (1)
+  0x000010|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x10d-0x10e.7 (2)
+  0x000010|                                             00|               .|          length: 80 0x10f-0x110.7 (2)
+  0x000011|50                                             |P               |
+  0x000011|   f6 ba ef e8 02 40 c5 ad 4a 3e 50 d8 4b 20 78| .....@..J>P.K x|          encrypted_data: raw bits 0x111-0x160.7 (80)
+  0x000012|8a f3 d0 81 20 8d 7a 8f 81 61 2e 30 e6 cd 8f 89|.... .z..a.0....|
+  *       |until 0x160.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x161-0x1a5.7 (69)
+  0x000016|   15                                          | .              |          type: "alert" (21) (valid) 0x161-0x161.7 (1)
+  0x000016|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x162-0x163.7 (2)
+  0x000016|            00 40                              |    .@          |          length: 64 0x164-0x165.7 (2)
+  0x000016|                  86 96 03 f5 57 88 94 b9 18 7f|      ....W.....|          encrypted_data: raw bits 0x166-0x1a5.7 (64)
+  0x000017|5f 58 8d 74 74 e0 d9 a4 81 f6 d3 5c 72 01 3d 25|_X.tt......\r.=%|
+  *       |until 0x1a5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xefc-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xefc-NA (0)
+          |                                               |                |    port: 4433 0xefc-NA (0)
+          |                                               |                |    has_start: true 0xefc-NA (0)
+          |                                               |                |    has_end: true 0xefc-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xefc-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x93d.7 (2366)
+          |                                               |                |      records[0:8]: 0x0-0x93d.7 (2366)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             b9|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|68 e2 37 be 6d 55 f0 16 f1 43 ef c9 1b 42 d9 77|h.7.mU...C...B.w|
+  0x000002|44 03 21 aa dd ef 54 ed 62 75 38               |D.!...T.bu8     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 6a      |            .j  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256" (0x6a) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e ef b7|........K.K.....|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x498.7 (85)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 50                     |       .P       |          length: 80 0x447-0x448.7 (2)
+  0x000044|                           d0 b4 0b b9 9d 08 d5|         .......|          encrypted_data: raw bits 0x449-0x498.7 (80)
+  0x000045|34 77 6e b7 c9 24 02 b9 a5 42 f8 4a 99 ac 5b 05|4wn..$...B.J..[.|
+  *       |until 0x498.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            28 20 b8 e7 8a 39 ed 87 ae e1 27 7d|    ( ...9....'}|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x499-0x93d.7 (1189)
+  0x000049|                           17                  |         .      |          type: "application_data" (23) (valid) 0x499-0x499.7 (1)
+  0x000049|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x49a-0x49b.7 (2)
+  0x000049|                                    04 a0      |            ..  |          length: 1184 0x49c-0x49d.7 (2)
+  0x000049|                                          11 7e|              .~|          encrypted_data: raw bits 0x49e-0x93d.7 (1184)
+  0x00004a|95 6b 1a 63 22 da a7 6f 90 13 b4 36 7e 29 40 bc|.k.c"..o...6~)@.|
+  *       |until 0x93d.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_GCM_SHA384.pcap.fqtest

@@ -0,0 +1,479 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_GCM_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe59-NA (0)
+          |                                               |                |  client{}: 0xe59-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe59-NA (0)
+          |                                               |                |    port: 56711 0xe59-NA (0)
+          |                                               |                |    has_start: true 0xe59-NA (0)
+          |                                               |                |    has_end: false 0xe59-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe59-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x145.7 (326)
+          |                                               |                |      records[0:6]: 0x0-0x145.7 (326)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             2b|               +|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|43 b6 b0 b9 43 96 0b c7 15 ef cc b8 7e 81 75 80|C...C.......~.u.|
+  0x000002|67 88 f1 d1 67 60 4a 6c 51 9f 50               |g...g`JlQ.P     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 a3|              ..|              [0]: "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384" (0xa3) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   c9 94 83 21 71 f7 a5 bf d4 10 ed ce 95 4d c5| ...!q........M.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|24 75 d1 c5 ce 31 0b c5 9f 24 e5 f2 34 03 0b d3|$u...1...$..4...|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xeb.7 (53)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 30            |          .0    |          length: 48 0xba-0xbb.7 (2)
+  0x00000b|                                    34 b5 3c d4|            4.<.|          encrypted_data: raw bits 0xbc-0xeb.7 (48)
+  0x00000c|e9 a2 cd 18 7d 48 a6 3a 10 ac 85 3b d2 18 a7 d4|....}H.:...;....|
+  *       |until 0xeb.7 (48)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            43 2c 80 83 2c 1d 29 ce ba 96 2e 05|    C,..,.).....|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xec-0x120.7 (53)
+  0x00000e|                                    17         |            .   |          type: "application_data" (23) (valid) 0xec-0xec.7 (1)
+  0x00000e|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|          length: 48 0xef-0xf0.7 (2)
+  0x00000f|30                                             |0               |
+  0x00000f|   34 b5 3c d4 e9 a2 cd 19 eb 64 e3 bb 05 52 94| 4.<......d...R.|          encrypted_data: raw bits 0xf1-0x120.7 (48)
+  0x000010|6c f6 35 33 05 3d f1 66 15 64 0d 0c 32 48 15 63|l.53.=.f.d..2H.c|
+  *       |until 0x120.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x121-0x145.7 (37)
+  0x000012|   15                                          | .              |          type: "alert" (21) (valid) 0x121-0x121.7 (1)
+  0x000012|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x122-0x123.7 (2)
+  0x000012|            00 20                              |    .           |          length: 32 0x124-0x125.7 (2)
+  0x000012|                  34 b5 3c d4 e9 a2 cd 1a 90 59|      4.<......Y|          encrypted_data: raw bits 0x126-0x145.7 (32)
+  0x000013|b2 56 7c c7 5f 09 54 c2 b5 b4 0b 2b cc 74 f3 77|.V|._.T....+.t.w|
+  0x000014|6c 76 bf fe 96 a5|                             |lv....|         |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe59-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe59-NA (0)
+          |                                               |                |    port: 4433 0xe59-NA (0)
+          |                                               |                |    has_start: true 0xe59-NA (0)
+          |                                               |                |    has_end: true 0xe59-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe59-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8fa.7 (2299)
+          |                                               |                |      records[0:8]: 0x0-0x8fa.7 (2299)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             e7|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|45 c7 a9 d6 6c f4 ba f8 f2 c3 e2 e6 df 98 b1 0d|E...l...........|
+  0x000002|43 b7 1f 8c 3f 2c d3 65 f3 b2 38               |C...?,.e..8     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 a3      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384" (0xa3) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x385.7 (185)                            |                |
+          |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x000038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x000038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x000038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+          |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x000038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x000038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+          |                                               |                |            data: raw bits 0x38f-NA (0)
+          |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x000038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x000039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x000039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+          |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x000039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x000039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x000039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x000039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x000039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x00003a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e af 89|........K.K.....|
+  *       |until 0x43d.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x000043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x000043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x000044|03                                             |.               |
+  0x000044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+          |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x000044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+          |                                               |                |        [6]{}: record 0x444-0x479.7 (54)
+  0x000044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x000044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x000044|                     00 31                     |       .1       |          length: 49 0x447-0x448.7 (2)
+  0x000044|                           e5 7c ba 09 b2 8d 91|         .|.....|          encrypted_data: raw bits 0x449-0x479.7 (49)
+  0x000045|1a 5f b4 d0 cb 44 f2 4b 3a fe 5d d4 cb c6 06 e6|._...D.K:.].....|
+  *       |until 0x479.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5b 66 a3 98 70 9d aa ea 51 4e 0e b5|    [f..p...QN..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x47a-0x8fa.7 (1153)
+  0x000047|                              17               |          .     |          type: "application_data" (23) (valid) 0x47a-0x47a.7 (1)
+  0x000047|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x47b-0x47c.7 (2)
+  0x000047|                                       04 7c   |             .| |          length: 1148 0x47d-0x47e.7 (2)
+  0x000047|                                             e5|               .|          encrypted_data: raw bits 0x47f-0x8fa.7 (1148)
+  0x000048|7c ba 09 b2 8d 91 1b 6f 21 98 32 62 49 22 ce 35||......o!.2bI".5|
+  *       |until 0x8fa.7 (end) (1148)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,456 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xeac-NA (0)
+       |                                               |                |  client{}: 0xeac-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+       |                                               |                |    port: 56751 0xeac-NA (0)
+       |                                               |                |    has_start: true 0xeac-NA (0)
+       |                                               |                |    has_end: false 0xeac-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             bc|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|09 3d 68 05 43 69 b9 ce 3f ed f9 9e aa d9 02 e2|.=h.Ci..?.......|
+  0x002|5d ce d3 7e 64 86 17 9c 5c 2f d2               |]..~d...\/.     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 44|              .D|              [0]: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA" (0x44) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   2e 10 3b 97 28 21 77 ce f1 10 f6 e7 66 f8 ec| ..;.(!w.....f..|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|6c 23 37 90 98 82 22 4d 89 cb 0a 89 a0 0f e9 2c|l#7..."M.......,|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    1f 7a 2b be|            .z+.|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|94 3a 8a fc 17 a8 76 f4 59 86 95 08 1e bc 7a 67|.:....v.Y.....zg|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   be aa e9 0c 1d 4d f2 c8 2d 14 be e7 a5 d4 c1| .....M..-......|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|4e 45 27 49 d2 29 7d 00 e6 fd 13 0c 41 e7 2d 81|NE'I.)}.....A.-.|
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  c4 ed 53 91 b9 85 cd 42 87 7e|      ..S....B.~|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|b8 a0 77 63 fe c0 0a 62 90 16 5b 21 b6 07 93 92|..wc...b..[!....|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xeac-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+       |                                               |                |    port: 4433 0xeac-NA (0)
+       |                                               |                |    has_start: true 0xeac-NA (0)
+       |                                               |                |    has_end: true 0xeac-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x91d.7 (2334)
+       |                                               |                |      records[0:8]: 0x0-0x91d.7 (2334)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             7e|               ~|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|14 6a 7d a2 0e 0e 64 49 79 70 fe 16 d6 d3 74 59|.j}...dIyp....tY|
+  0x002|a4 d7 5a 67 3d af 77 35 e2 84 f5               |..Zg=.w5...     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 44      |            .D  |            cipher_suit: "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA" (0x44) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+       |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x005|02 72                                          |.r              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+       |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x006|dd                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+       |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+       |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+       |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+       |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+       |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+       |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+       |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+       |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+       |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+       |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+       |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+       |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+       |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+       |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+       |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00d|01 b6                                          |..              |
+       |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+       |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+       |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+       |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+       |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+       |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+       |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+       |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *    |until 0x166.7 (129)                            |                |
+       |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+       |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x018|80                                             |.               |
+  0x018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *    |until 0x200.7 (128)                            |                |
+       |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *    |until 0x287.7 (131)                            |                |
+       |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+       |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+       |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+       |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x029|38                                             |8               |
+  0x029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+       |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x02a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *    |until 0x2c3.7 (46)                             |                |
+       |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x02c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x02c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x02c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+       |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x02c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x02c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x02c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x02d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *    |until 0x385.7 (185)                            |                |
+       |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+       |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+       |                                               |                |            data: raw bits 0x38f-NA (0)
+       |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+       |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x03a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 90 57|........K.K....W|
+  *    |until 0x43d.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x044|03                                             |.               |
+  0x044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+       |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+       |                                               |                |        [6]{}: record 0x444-0x488.7 (69)
+  0x044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x044|                     00 40                     |       .@       |          length: 64 0x447-0x448.7 (2)
+  0x044|                           a4 b0 ee 02 06 99 6a|         ......j|          encrypted_data: raw bits 0x449-0x488.7 (64)
+  0x045|dc da 92 65 1a be dd b9 7c b7 72 27 23 44 51 e2|...e....|.r'#DQ.|
+  *    |until 0x488.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x489-0x91d.7 (1173)
+  0x048|                           17                  |         .      |          type: "application_data" (23) (valid) 0x489-0x489.7 (1)
+  0x048|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x48a-0x48b.7 (2)
+  0x048|                                    04 90      |            ..  |          length: 1168 0x48c-0x48d.7 (2)
+  0x048|                                          79 2d|              y-|          encrypted_data: raw bits 0x48e-0x91d.7 (1168)
+  0x049|f8 eb 73 e9 e4 bf e0 f9 b1 49 7e b3 3f 04 2d ec|..s......I~.?.-.|
+  *    |until 0x91d.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,456 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xeac-NA (0)
+       |                                               |                |  client{}: 0xeac-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+       |                                               |                |    port: 56718 0xeac-NA (0)
+       |                                               |                |    has_start: true 0xeac-NA (0)
+       |                                               |                |    has_end: false 0xeac-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000|                                             3e|               >|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|a5 f4 08 5f 49 3a 4c 59 64 a9 a9 6b aa 38 39 7c|..._I:LYd..k.89||
+  0x002|c6 25 c5 14 be e6 2b f1 af b1 db               |.%....+....     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 87|              ..|              [0]: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA" (0x87) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   45 af 35 e7 c1 42 00 09 b1 30 13 55 78 1c c6| E.5..B...0.Ux..|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|f0 92 7f e1 db 76 c4 ad 86 82 7d 2b 0a 50 a3 55|.....v....}+.P.U|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    e4 3e 93 f6|            .>..|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|5a 81 99 2d cf e9 13 fb b3 d9 d9 11 cf 86 b2 f0|Z..-............|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   39 f0 5f 1e 84 b3 9e e8 27 6d c0 32 1b ac b7| 9._.....'m.2...|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|c9 6f 3e 56 9d 24 6b 25 6a 1f 4d 60 3e 53 eb 23|.o>V.$k%j.M`>S.#|
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  e2 cb 1e 06 a7 f6 20 a0 96 e3|      ...... ...|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|98 c8 8c 99 dd c7 dc 0a 8c a9 14 c6 d1 f0 46 b2|..............F.|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xeac-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeac-NA (0)
+       |                                               |                |    port: 4433 0xeac-NA (0)
+       |                                               |                |    has_start: true 0xeac-NA (0)
+       |                                               |                |    has_end: true 0xeac-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeac-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x91d.7 (2334)
+       |                                               |                |      records[0:8]: 0x0-0x91d.7 (2334)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000|                                             f5|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|a5 96 40 19 55 d9 ce 5a 12 a0 c2 69 df 79 f7 3b|..@.U..Z...i.y.;|
+  0x002|1d b7 9d 44 05 df 15 de f5 b9 73               |...D......s     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 87      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA" (0x87) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+       |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x005|02 72                                          |.r              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+       |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x006|dd                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+       |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+       |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+       |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+       |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+       |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+       |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+       |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+       |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+       |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+       |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+       |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+       |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+       |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+       |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+       |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00d|01 b6                                          |..              |
+       |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+       |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+       |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+       |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+       |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+       |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+       |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+       |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *    |until 0x166.7 (129)                            |                |
+       |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+       |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x018|80                                             |.               |
+  0x018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *    |until 0x200.7 (128)                            |                |
+       |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *    |until 0x287.7 (131)                            |                |
+       |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+       |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+       |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+       |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x029|38                                             |8               |
+  0x029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+       |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x02a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *    |until 0x2c3.7 (46)                             |                |
+       |                                               |                |        [2]{}: record 0x2c4-0x385.7 (194)
+  0x02c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x02c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x02c|                     00 bd                     |       ..       |          length: 189 0x2c7-0x2c8.7 (2)
+       |                                               |                |          message{}: 0x2c9-0x385.7 (189)
+  0x02c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x02c|                              00 00 b9         |          ...   |            length: 185 0x2ca-0x2cc.7 (3)
+  0x02c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x385.7 (185)
+  0x02d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *    |until 0x385.7 (185)                            |                |
+       |                                               |                |        [3]{}: record 0x386-0x38e.7 (9)
+  0x038|                  16                           |      .         |          type: "handshake" (22) (valid) 0x386-0x386.7 (1)
+  0x038|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x387-0x388.7 (2)
+  0x038|                           00 04               |         ..     |          length: 4 0x389-0x38a.7 (2)
+       |                                               |                |          message{}: 0x38b-0x38e.7 (4)
+  0x038|                                 0e            |           .    |            type: "server_hello_done" (14) 0x38b-0x38b.7 (1)
+  0x038|                                    00 00 00   |            ... |            length: 0 0x38c-0x38e.7 (3)
+       |                                               |                |            data: raw bits 0x38f-NA (0)
+       |                                               |                |        [4]{}: record 0x38f-0x43d.7 (175)
+  0x038|                                             16|               .|          type: "handshake" (22) (valid) 0x38f-0x38f.7 (1)
+  0x039|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x390-0x391.7 (2)
+  0x039|      00 aa                                    |  ..            |          length: 170 0x392-0x393.7 (2)
+       |                                               |                |          message{}: 0x394-0x43d.7 (170)
+  0x039|            04                                 |    .           |            type: "new_session_ticket" (4) 0x394-0x394.7 (1)
+  0x039|               00 00 a6                        |     ...        |            length: 166 0x395-0x397.7 (3)
+  0x039|                        00 00 01 2c            |        ...,    |            lifetime_hint: 300 0x398-0x39b.7 (4)
+  0x039|                                    00 a0      |            ..  |            ticket_length: 160 0x39c-0x39d.7 (2)
+  0x039|                                          22 07|              ".|            ticket: raw bits 0x39e-0x43d.7 (160)
+  0x03a|b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e 56 91|........K.K...V.|
+  *    |until 0x43d.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x43e-0x443.7 (6)
+  0x043|                                          14   |              . |          type: "change_cipher_spec" (20) (valid) 0x43e-0x43e.7 (1)
+  0x043|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x43f-0x440.7 (2)
+  0x044|03                                             |.               |
+  0x044|   00 01                                       | ..             |          length: 1 0x441-0x442.7 (2)
+       |                                               |                |          message{}: 0x443-0x443.7 (1)
+  0x044|         01                                    |   .            |            type: 1 0x443-0x443.7 (1)
+       |                                               |                |        [6]{}: record 0x444-0x488.7 (69)
+  0x044|            16                                 |    .           |          type: "handshake" (22) (valid) 0x444-0x444.7 (1)
+  0x044|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x445-0x446.7 (2)
+  0x044|                     00 40                     |       .@       |          length: 64 0x447-0x448.7 (2)
+  0x044|                           43 cd 85 87 41 fa 2f|         C...A./|          encrypted_data: raw bits 0x449-0x488.7 (64)
+  0x045|28 f5 97 e3 a4 62 b3 fd 28 25 45 85 1f 25 47 56|(....b..(%E..%GV|
+  *    |until 0x488.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x489-0x91d.7 (1173)
+  0x048|                           17                  |         .      |          type: "application_data" (23) (valid) 0x489-0x489.7 (1)
+  0x048|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x48a-0x48b.7 (2)
+  0x048|                                    04 90      |            ..  |          length: 1168 0x48c-0x48d.7 (2)
+  0x048|                                          c1 76|              .v|          encrypted_data: raw bits 0x48e-0x91d.7 (1168)
+  0x049|b1 03 59 45 27 b5 d8 5d 4f de bd c0 a1 d3 04 5c|..YE'..]O......\|
+  *    |until 0x91d.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_DES_CBC_SHA.pcap.fqtest

@@ -0,0 +1,477 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_DES_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe7d-NA (0)
+          |                                               |                |  client{}: 0xe7d-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe7d-NA (0)
+          |                                               |                |    port: 56771 0xe7d-NA (0)
+          |                                               |                |    has_start: true 0xe7d-NA (0)
+          |                                               |                |    has_end: false 0xe7d-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe7d-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             30|               0|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|1c a5 61 dc 6e 3e a3 f9 65 0d 99 36 c4 5c 17 c2|..a.n>..e..6.\..|
+  0x000002|90 3c af 02 fd 4e d7 7d f3 d7 78               |.<...N.}..x     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 12|              ..|              [0]: "TLS_DHE_DSS_WITH_DES_CBC_SHA" (0x12) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   31 00 cb 11 96 a2 c9 1d 0b f9 c9 d3 65 71 da| 1...........eq.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|c0 16 0d 64 6b 04 6b da ba 88 84 71 a0 5d 7b 48|...dk.k....q.]{H|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    81 71 f5 3c|            .q.<|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|2b 65 57 8d 80 a5 00 42 52 8a b0 2a dd be ca 74|+eW....BR..*...t|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ed ad 63 8e 0d fe 7a 6a 3c c8 5f 6b|    ..c...zj<._k|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           e5 66 49 ce 7e 01 37|         .fI.~.7|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|a7 98 63 30 6d 25 aa d4 2b 1a 97 97 74 e5 da fb|..c0m%..+...t...|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  bb 8c dc e5 87 34 45 b3 c6 cb|      .....4E...|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|91 bf a2 34 2c 8b c6 96 01 0d e7 a3 17 30 07 f0|...4,........0..|
+  0x000015|02 78 59 76 6d ff e8 ec 4b 82 2e e7 23 d6|     |.xYvm...K...#.| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe7d-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe7d-NA (0)
+          |                                               |                |    port: 4433 0xe7d-NA (0)
+          |                                               |                |    has_start: true 0xe7d-NA (0)
+          |                                               |                |    has_end: true 0xe7d-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe7d-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x906.7 (2311)
+          |                                               |                |      records[0:8]: 0x0-0x906.7 (2311)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             ea|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|3f 30 b0 8e 1b 89 eb f7 75 bb 41 62 ea d6 3a ce|?0......u.Ab..:.|
+  0x000002|9c 90 89 ef 61 27 10 20 90 7b f2               |....a'. .{.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 12      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_DES_CBC_SHA" (0x12) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x000004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+          |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x000004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x000005|02 72                                          |.r              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+          |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x000006|dd                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+          |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x000006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x000006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+          |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x000006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x000006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x000006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x000006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+          |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x000006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+          |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x000007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+          |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x000007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x000007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x000007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+          |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x000007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x000007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x000007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x000007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+          |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x000007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x000007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x000007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x000007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x000008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+          |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x000008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x000008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x000008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x000008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+          |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x000008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x000008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x000008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x000009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x000009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+          |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x000009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x000009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x000009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x000009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00000a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+          |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00000a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00000a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00000a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00000a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+          |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00000a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00000a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00000a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00000b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+          |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00000b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00000b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00000b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00000b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00000b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00000b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+          |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00000b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00000b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00000c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+          |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00000c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00000c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00000c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00000c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00000d|01 b6                                          |..              |
+          |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+          |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00000d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+          |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+          |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00000d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00000d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00000d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00000d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+          |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00000d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00000d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00000d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00000d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00000d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00000d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+          |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00000d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+          |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+          |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00000e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00000e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00000e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00000e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00000e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00000f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *       |until 0x166.7 (129)                            |                |
+          |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x000016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x000016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x000016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x000016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x000016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x000017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+          |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x000017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x000018|80                                             |.               |
+  0x000018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x000019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *       |until 0x200.7 (128)                            |                |
+          |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x000020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x000020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x000020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x000020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x000020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x000020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x000021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *       |until 0x287.7 (131)                            |                |
+          |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x000028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x000028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x000028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x000028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+          |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x000028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x000028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x000028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x000028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+          |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x000028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x000028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x000028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x000028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x000029|38                                             |8               |
+  0x000029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x000029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+          |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x000029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x000029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x000029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x000029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x000029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x000029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x00002a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *       |until 0x2c3.7 (46)                             |                |
+          |                                               |                |        [2]{}: record 0x2c4-0x386.7 (195)
+  0x00002c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x00002c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x00002c|                     00 be                     |       ..       |          length: 190 0x2c7-0x2c8.7 (2)
+          |                                               |                |          message{}: 0x2c9-0x386.7 (190)
+  0x00002c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x00002c|                              00 00 ba         |          ...   |            length: 186 0x2ca-0x2cc.7 (3)
+  0x00002c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x386.7 (186)
+  0x00002d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *       |until 0x386.7 (186)                            |                |
+          |                                               |                |        [3]{}: record 0x387-0x38f.7 (9)
+  0x000038|                     16                        |       .        |          type: "handshake" (22) (valid) 0x387-0x387.7 (1)
+  0x000038|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x388-0x389.7 (2)
+  0x000038|                              00 04            |          ..    |          length: 4 0x38a-0x38b.7 (2)
+          |                                               |                |          message{}: 0x38c-0x38f.7 (4)
+  0x000038|                                    0e         |            .   |            type: "server_hello_done" (14) 0x38c-0x38c.7 (1)
+  0x000038|                                       00 00 00|             ...|            length: 0 0x38d-0x38f.7 (3)
+          |                                               |                |            data: raw bits 0x390-NA (0)
+          |                                               |                |        [4]{}: record 0x390-0x43e.7 (175)
+  0x000039|16                                             |.               |          type: "handshake" (22) (valid) 0x390-0x390.7 (1)
+  0x000039|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x391-0x392.7 (2)
+  0x000039|         00 aa                                 |   ..           |          length: 170 0x393-0x394.7 (2)
+          |                                               |                |          message{}: 0x395-0x43e.7 (170)
+  0x000039|               04                              |     .          |            type: "new_session_ticket" (4) 0x395-0x395.7 (1)
+  0x000039|                  00 00 a6                     |      ...       |            length: 166 0x396-0x398.7 (3)
+  0x000039|                           00 00 01 2c         |         ...,   |            lifetime_hint: 300 0x399-0x39c.7 (4)
+  0x000039|                                       00 a0   |             .. |            ticket_length: 160 0x39d-0x39e.7 (2)
+  0x000039|                                             22|               "|            ticket: raw bits 0x39f-0x43e.7 (160)
+  0x00003a|07 b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e c3|.........K.K....|
+  *       |until 0x43e.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x43f-0x444.7 (6)
+  0x000043|                                             14|               .|          type: "change_cipher_spec" (20) (valid) 0x43f-0x43f.7 (1)
+  0x000044|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x440-0x441.7 (2)
+  0x000044|      00 01                                    |  ..            |          length: 1 0x442-0x443.7 (2)
+          |                                               |                |          message{}: 0x444-0x444.7 (1)
+  0x000044|            01                                 |    .           |            type: 1 0x444-0x444.7 (1)
+          |                                               |                |        [6]{}: record 0x445-0x481.7 (61)
+  0x000044|               16                              |     .          |          type: "handshake" (22) (valid) 0x445-0x445.7 (1)
+  0x000044|                  03 03                        |      ..        |          version: "tls1.2" (0x303) (valid) 0x446-0x447.7 (2)
+  0x000044|                        00 38                  |        .8      |          length: 56 0x448-0x449.7 (2)
+  0x000044|                              fc f5 40 e1 8e 2d|          ..@..-|          encrypted_data: raw bits 0x44a-0x481.7 (56)
+  0x000045|2d 46 6f 20 03 d7 8b 64 c9 b0 96 cb ed 26 cd 07|-Fo ...d.....&..|
+  *       |until 0x481.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5d 22 06 be fa 45 eb 21 0c c5 54 9b|    ]"...E.!..T.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x482-0x906.7 (1157)
+  0x000048|      17                                       |  .             |          type: "application_data" (23) (valid) 0x482-0x482.7 (1)
+  0x000048|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x483-0x484.7 (2)
+  0x000048|               04 80                           |     ..         |          length: 1152 0x485-0x486.7 (2)
+  0x000048|                     7e db 95 2d 4d 93 ea ea ce|       ~..-M....|          encrypted_data: raw bits 0x487-0x906.7 (1152)
+  0x000049|89 77 f8 c1 cb 1e 8a 3f bb b5 df b2 51 42 c6 fa|.w.....?....QB..|
+  *       |until 0x906.7 (end) (1152)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x112c.7 (4397)
+    *     |until 0x112c.7 (end) (4397)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x112c.7 (4397)
+    *     |until 0x112c.7 (end) (4397)                    |                |

format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_SEED_CBC_SHA.pcap.fqtest

@@ -0,0 +1,454 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_SEED_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xeae-NA (0)
+       |                                               |                |  client{}: 0xeae-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeae-NA (0)
+       |                                               |                |    port: 56749 0xeae-NA (0)
+       |                                               |                |    has_start: true 0xeae-NA (0)
+       |                                               |                |    has_end: false 0xeae-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeae-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             bc|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|7a c8 e3 03 96 d3 9b 15 19 d1 c7 d3 68 a3 1b 2f|z...........h../|
+  0x002|ec 54 28 c0 63 dd aa 30 4e 7d 58               |.T(.c..0N}X     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 99|              ..|              [0]: "TLS_DHE_DSS_WITH_SEED_CBC_SHA" (0x99) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   a5 70 c4 70 9b ce cc 7e e8 b2 72 5e 60 eb 36| .p.p...~..r^`.6|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|31 15 54 7b 8e e8 26 73 b9 26 51 06 fe 2c e9 59|1.T{..&s.&Q..,.Y|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    16 64 67 74|            .dgt|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|d6 18 cd 73 78 81 af 6f 59 4a 6d cc 08 b1 88 75|...sx..oYJm....u|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   3f 4a e3 c0 f8 e5 a4 23 04 52 ad 9d c6 ea 50| ?J.....#.R....P|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|1a 77 18 c9 32 53 f1 17 cb a6 f7 9e d9 dd 9a 8f|.w..2S..........|
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  a5 5a 1c db 9f 6d a9 ac 93 8f|      .Z...m....|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|c4 20 72 3e 10 2c 06 a3 b5 ce 6c 49 e8 33 22 f6|. r>.,....lI.3".|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xeae-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xeae-NA (0)
+       |                                               |                |    port: 4433 0xeae-NA (0)
+       |                                               |                |    has_start: true 0xeae-NA (0)
+       |                                               |                |    has_end: true 0xeae-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xeae-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x91f.7 (2336)
+       |                                               |                |      records[0:8]: 0x0-0x91f.7 (2336)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             b0|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|c9 7a 93 cd c9 0c 33 11 00 39 93 c7 77 ac 30 f2|.z....3..9..w.0.|
+  0x002|38 cb dd f0 58 51 1a e8 c4 87 88               |8...XQ.....     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 99      |            ..  |            cipher_suit: "TLS_DHE_DSS_WITH_SEED_CBC_SHA" (0x99) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x2c3.7 (645)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      02 80                                    |  ..            |          length: 640 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x2c3.7 (640)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 02 7c                        |     ..|        |            length: 636 0x45-0x47.7 (3)
+  0x004|                        00 02 79               |        ..y     |            certificates_length: 633 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x2c3.7 (633)
+       |                                               |                |              [0]{}: certificate 0x4b-0x2c3.7 (633)
+  0x004|                                 00 02 76      |           ..v  |                length: 630 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x2c3.7 (630)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 626 0x4f-0x51.7 (3)
+  0x005|02 72                                          |.r              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x2c3.7 (626)
+       |                                               |                |                    [0]{}: object 0x52-0x287.7 (566)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 02 32                              |   ..2          |                      length: 562 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x287.7 (562)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 c6 85 8b d3 08 d4 32|        .......2|                          value: 14304993529914733277 0x58-0x60.7 (9)
+  0x006|dd                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6b.7 (11)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      09                                       |  .             |                          length: 9 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x63-0x6b.7 (9)
+       |                                               |                |                            [0]{}: object 0x63-0x6b.7 (9)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            07                                 |    .           |                              length: 7 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:6]: 0x65-0x6b.7 (7)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        ce 38                  |        .8      |                                [3]: 10040 oid 0x68-0x69.7 (2)
+  0x006|                              04               |          .     |                                [4]: 4 oid 0x6a-0x6a.7 (1)
+  0x006|                                 03            |           .    |                                [5]: 3 oid 0x6b-0x6b.7 (1)
+       |                                               |                |                        [2]{}: object 0x6c-0x8c.7 (33)
+  0x006|                                    30         |            0   |                          class: "universal" (0) 0x6c-0x6c.1 (0.2)
+  0x006|                                    30         |            0   |                          form: "constructed" (1) 0x6c.2-0x6c.2 (0.1)
+  0x006|                                    30         |            0   |                          tag: "sequence" (0x10) 0x6c.3-0x6c.7 (0.5)
+  0x006|                                       1f      |             .  |                          length: 31 0x6d-0x6d.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x6e-0x8c.7 (31)
+       |                                               |                |                            [0]{}: object 0x6e-0x8c.7 (31)
+  0x006|                                          31   |              1 |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          31   |              1 |                              form: "constructed" (1) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          31   |              1 |                              tag: "set" (0x11) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             1d|               .|                              length: 29 0x6f-0x6f.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x70-0x8c.7 (29)
+       |                                               |                |                                [0]{}: object 0x70-0x8c.7 (29)
+  0x007|30                                             |0               |                                  class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                                  form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                                  tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1b                                          | .              |                                  length: 27 0x71-0x71.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x72-0x8c.7 (27)
+       |                                               |                |                                    [0]{}: object 0x72-0x76.7 (5)
+  0x007|      06                                       |  .             |                                      class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      06                                       |  .             |                                      form: "primitive" (0) 0x72.2-0x72.2 (0.1)
+  0x007|      06                                       |  .             |                                      tag: "object_identifier" (0x6) 0x72.3-0x72.7 (0.5)
+  0x007|         03                                    |   .            |                                      length: 3 0x73-0x73.7 (1)
+       |                                               |                |                                      value[0:4]: 0x74-0x76.7 (3)
+  0x007|            55                                 |    U           |                                        [0]: 2 oid 0x74-0x74.7 (1)
+  0x007|            55                                 |    U           |                                        [1]: 5 oid 0x74-0x74.7 (1)
+  0x007|               04                              |     .          |                                        [2]: 4 oid 0x75-0x75.7 (1)
+  0x007|                  03                           |      .         |                                        [3]: 3 oid 0x76-0x76.7 (1)
+       |                                               |                |                                    [1]{}: object 0x77-0x8c.7 (22)
+  0x007|                     0c                        |       .        |                                      class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x007|                     0c                        |       .        |                                      form: "primitive" (0) 0x77.2-0x77.2 (0.1)
+  0x007|                     0c                        |       .        |                                      tag: "utf8_string" (0xc) 0x77.3-0x77.7 (0.5)
+  0x007|                        14                     |        .       |                                      length: 20 0x78-0x78.7 (1)
+  0x007|                           54 65 73 74 20 43 65|         Test Ce|                                      value: "Test Certificate DSS" 0x79-0x8c.7 (20)
+  0x008|72 74 69 66 69 63 61 74 65 20 44 53 53         |rtificate DSS   |
+       |                                               |                |                        [3]{}: object 0x8d-0xac.7 (32)
+  0x008|                                       30      |             0  |                          class: "universal" (0) 0x8d-0x8d.1 (0.2)
+  0x008|                                       30      |             0  |                          form: "constructed" (1) 0x8d.2-0x8d.2 (0.1)
+  0x008|                                       30      |             0  |                          tag: "sequence" (0x10) 0x8d.3-0x8d.7 (0.5)
+  0x008|                                          1e   |              . |                          length: 30 0x8e-0x8e.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x8f-0xac.7 (30)
+       |                                               |                |                            [0]{}: object 0x8f-0x9d.7 (15)
+  0x008|                                             17|               .|                              class: "universal" (0) 0x8f-0x8f.1 (0.2)
+  0x008|                                             17|               .|                              form: "primitive" (0) 0x8f.2-0x8f.2 (0.1)
+  0x008|                                             17|               .|                              tag: "utc_time" (0x17) 0x8f.3-0x8f.7 (0.5)
+  0x009|0d                                             |.               |                              length: 13 0x90-0x90.7 (1)
+  0x009|   31 33 30 39 31 35 32 31 35 31 31 30 5a      | 130915215110Z  |                              value: "130915215110Z" 0x91-0x9d.7 (13)
+       |                                               |                |                            [1]{}: object 0x9e-0xac.7 (15)
+  0x009|                                          17   |              . |                              class: "universal" (0) 0x9e-0x9e.1 (0.2)
+  0x009|                                          17   |              . |                              form: "primitive" (0) 0x9e.2-0x9e.2 (0.1)
+  0x009|                                          17   |              . |                              tag: "utc_time" (0x17) 0x9e.3-0x9e.7 (0.5)
+  0x009|                                             0d|               .|                              length: 13 0x9f-0x9f.7 (1)
+  0x00a|32 33 30 39 31 33 32 31 35 31 31 30 5a         |230913215110Z   |                              value: "230913215110Z" 0xa0-0xac.7 (13)
+       |                                               |                |                        [4]{}: object 0xad-0xcd.7 (33)
+  0x00a|                                       30      |             0  |                          class: "universal" (0) 0xad-0xad.1 (0.2)
+  0x00a|                                       30      |             0  |                          form: "constructed" (1) 0xad.2-0xad.2 (0.1)
+  0x00a|                                       30      |             0  |                          tag: "sequence" (0x10) 0xad.3-0xad.7 (0.5)
+  0x00a|                                          1f   |              . |                          length: 31 0xae-0xae.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xaf-0xcd.7 (31)
+       |                                               |                |                            [0]{}: object 0xaf-0xcd.7 (31)
+  0x00a|                                             31|               1|                              class: "universal" (0) 0xaf-0xaf.1 (0.2)
+  0x00a|                                             31|               1|                              form: "constructed" (1) 0xaf.2-0xaf.2 (0.1)
+  0x00a|                                             31|               1|                              tag: "set" (0x11) 0xaf.3-0xaf.7 (0.5)
+  0x00b|1d                                             |.               |                              length: 29 0xb0-0xb0.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb1-0xcd.7 (29)
+       |                                               |                |                                [0]{}: object 0xb1-0xcd.7 (29)
+  0x00b|   30                                          | 0              |                                  class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                                  form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                                  tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1b                                       |  .             |                                  length: 27 0xb2-0xb2.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb3-0xcd.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb3-0xb7.7 (5)
+  0x00b|         06                                    |   .            |                                      class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         06                                    |   .            |                                      form: "primitive" (0) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         06                                    |   .            |                                      tag: "object_identifier" (0x6) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            03                                 |    .           |                                      length: 3 0xb4-0xb4.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb5-0xb7.7 (3)
+  0x00b|               55                              |     U          |                                        [0]: 2 oid 0xb5-0xb5.7 (1)
+  0x00b|               55                              |     U          |                                        [1]: 5 oid 0xb5-0xb5.7 (1)
+  0x00b|                  04                           |      .         |                                        [2]: 4 oid 0xb6-0xb6.7 (1)
+  0x00b|                     03                        |       .        |                                        [3]: 3 oid 0xb7-0xb7.7 (1)
+       |                                               |                |                                    [1]{}: object 0xb8-0xcd.7 (22)
+  0x00b|                        0c                     |        .       |                                      class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00b|                        0c                     |        .       |                                      form: "primitive" (0) 0xb8.2-0xb8.2 (0.1)
+  0x00b|                        0c                     |        .       |                                      tag: "utf8_string" (0xc) 0xb8.3-0xb8.7 (0.5)
+  0x00b|                           14                  |         .      |                                      length: 20 0xb9-0xb9.7 (1)
+  0x00b|                              54 65 73 74 20 43|          Test C|                                      value: "Test Certificate DSS" 0xba-0xcd.7 (20)
+  0x00c|65 72 74 69 66 69 63 61 74 65 20 44 53 53      |ertificate DSS  |
+       |                                               |                |                        [5]{}: object 0xce-0x287.7 (442)
+  0x00c|                                          30   |              0 |                          class: "universal" (0) 0xce-0xce.1 (0.2)
+  0x00c|                                          30   |              0 |                          form: "constructed" (1) 0xce.2-0xce.2 (0.1)
+  0x00c|                                          30   |              0 |                          tag: "sequence" (0x10) 0xce.3-0xce.7 (0.5)
+  0x00c|                                             82|               .|                          length: 438 0xcf-0xd1.7 (3)
+  0x00d|01 b6                                          |..              |
+       |                                               |                |                          constructed[0:2]: 0xd2-0x287.7 (438)
+       |                                               |                |                            [0]{}: object 0xd2-0x200.7 (303)
+  0x00d|      30                                       |  0             |                              class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                              form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                              tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         82 01 2b                              |   ..+          |                              length: 299 0xd3-0xd5.7 (3)
+       |                                               |                |                              constructed[0:2]: 0xd6-0x200.7 (299)
+       |                                               |                |                                [0]{}: object 0xd6-0xde.7 (9)
+  0x00d|                  06                           |      .         |                                  class: "universal" (0) 0xd6-0xd6.1 (0.2)
+  0x00d|                  06                           |      .         |                                  form: "primitive" (0) 0xd6.2-0xd6.2 (0.1)
+  0x00d|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xd6.3-0xd6.7 (0.5)
+  0x00d|                     07                        |       .        |                                  length: 7 0xd7-0xd7.7 (1)
+       |                                               |                |                                  value[0:6]: 0xd8-0xde.7 (7)
+  0x00d|                        2a                     |        *       |                                    [0]: 1 oid 0xd8-0xd8.7 (1)
+  0x00d|                        2a                     |        *       |                                    [1]: 2 oid 0xd8-0xd8.7 (1)
+  0x00d|                           86 48               |         .H     |                                    [2]: 840 oid 0xd9-0xda.7 (2)
+  0x00d|                                 ce 38         |           .8   |                                    [3]: 10040 oid 0xdb-0xdc.7 (2)
+  0x00d|                                       04      |             .  |                                    [4]: 4 oid 0xdd-0xdd.7 (1)
+  0x00d|                                          01   |              . |                                    [5]: 1 oid 0xde-0xde.7 (1)
+       |                                               |                |                                [1]{}: object 0xdf-0x200.7 (290)
+  0x00d|                                             30|               0|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00d|                                             30|               0|                                  form: "constructed" (1) 0xdf.2-0xdf.2 (0.1)
+  0x00d|                                             30|               0|                                  tag: "sequence" (0x10) 0xdf.3-0xdf.7 (0.5)
+  0x00e|82 01 1e                                       |...             |                                  length: 286 0xe0-0xe2.7 (3)
+       |                                               |                |                                  constructed[0:3]: 0xe3-0x200.7 (286)
+       |                                               |                |                                    [0]{}: object 0xe3-0x166.7 (132)
+  0x00e|         02                                    |   .            |                                      class: "universal" (0) 0xe3-0xe3.1 (0.2)
+  0x00e|         02                                    |   .            |                                      form: "primitive" (0) 0xe3.2-0xe3.2 (0.1)
+  0x00e|         02                                    |   .            |                                      tag: "integer" (0x2) 0xe3.3-0xe3.7 (0.5)
+  0x00e|            81 81                              |    ..          |                                      length: 129 0xe4-0xe5.7 (2)
+  0x00e|                  00 c2 f7 7e e9 70 e7 89 12 0a|      ...~.p....|                                      value: 136910329070488299378327259524927038161733379470505356730121232091090086514834553845968989920849620435345775777167290535699239055131308141952489888965222417689471480719820943713033298825729988988452440118426146804292912092805770067484684608296506113124192386094297682201884209532959834970982669442066672091881 0xe6-0x166.7 (129)
+  0x00f|a5 78 26 24 fc cd 49 7e c2 d3 9f 22 8d 27 e6 ca|.x&$..I~...".'..|
+  *    |until 0x166.7 (129)                            |                |
+       |                                               |                |                                    [1]{}: object 0x167-0x17d.7 (23)
+  0x016|                     02                        |       .        |                                      class: "universal" (0) 0x167-0x167.1 (0.2)
+  0x016|                     02                        |       .        |                                      form: "primitive" (0) 0x167.2-0x167.2 (0.1)
+  0x016|                     02                        |       .        |                                      tag: "integer" (0x2) 0x167.3-0x167.7 (0.5)
+  0x016|                        15                     |        .       |                                      length: 21 0x168-0x168.7 (1)
+  0x016|                           00 98 58 f2 62 6b b6|         ..X.bk.|                                      value: 869750177406735357517327538899360394175585208387 0x169-0x17d.7 (21)
+  0x017|3c 03 14 47 dd 8e 68 4a 3d 1c fe 4c 48 43      |<..G..hJ=..LHC  |
+       |                                               |                |                                    [2]{}: object 0x17e-0x200.7 (131)
+  0x017|                                          02   |              . |                                      class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x017|                                          02   |              . |                                      form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x017|                                          02   |              . |                                      tag: "integer" (0x2) 0x17e.3-0x17e.7 (0.5)
+  0x017|                                             81|               .|                                      length: 128 0x17f-0x180.7 (2)
+  0x018|80                                             |.               |
+  0x018|   3f 02 ab 4e 43 f4 41 32 34 ad cd 98 49 8f c2| ?..NC.A24...I..|                                      value: 44247426170402622087425518647469060177168515448383480108707357314914924071046359553790624375303209327971525248666708548293595274064224162982232337674914654715681152890905955591957342867846032291315547979242473713074351452275228730099918471850426035459597093784807208832673341150587615416898207576073482022832 0x181-0x200.7 (128)
+  0x019|91 c9 3e 91 3b e8 6d 99 17 fc e1 51 de d5 b6 fa|..>.;.m....Q....|
+  *    |until 0x200.7 (128)                            |                |
+       |                                               |                |                            [1]{}: object 0x201-0x287.7 (135)
+  0x020|   03                                          | .              |                              class: "universal" (0) 0x201-0x201.1 (0.2)
+  0x020|   03                                          | .              |                              form: "primitive" (0) 0x201.2-0x201.2 (0.1)
+  0x020|   03                                          | .              |                              tag: "bit_string" (0x3) 0x201.3-0x201.7 (0.5)
+  0x020|      81 84                                    |  ..            |                              length: 132 0x202-0x203.7 (2)
+  0x020|            00                                 |    .           |                              unused_bits_count: 0 0x204-0x204.7 (1)
+  0x020|               02 81 80 7f 19 87 d0 34 72 de 66|     .......4r.f|                              value: raw bits 0x205-0x287.7 (131)
+  0x021|cd 51 0f 99 aa da fb 56 89 94 64 4d 94 47 a1 b6|.Q.....V..dM.G..|
+  *    |until 0x287.7 (131)                            |                |
+       |                                               |                |                    [1]{}: object 0x288-0x292.7 (11)
+  0x028|                        30                     |        0       |                      class: "universal" (0) 0x288-0x288.1 (0.2)
+  0x028|                        30                     |        0       |                      form: "constructed" (1) 0x288.2-0x288.2 (0.1)
+  0x028|                        30                     |        0       |                      tag: "sequence" (0x10) 0x288.3-0x288.7 (0.5)
+  0x028|                           09                  |         .      |                      length: 9 0x289-0x289.7 (1)
+       |                                               |                |                      constructed[0:1]: 0x28a-0x292.7 (9)
+       |                                               |                |                        [0]{}: object 0x28a-0x292.7 (9)
+  0x028|                              06               |          .     |                          class: "universal" (0) 0x28a-0x28a.1 (0.2)
+  0x028|                              06               |          .     |                          form: "primitive" (0) 0x28a.2-0x28a.2 (0.1)
+  0x028|                              06               |          .     |                          tag: "object_identifier" (0x6) 0x28a.3-0x28a.7 (0.5)
+  0x028|                                 07            |           .    |                          length: 7 0x28b-0x28b.7 (1)
+       |                                               |                |                          value[0:6]: 0x28c-0x292.7 (7)
+  0x028|                                    2a         |            *   |                            [0]: 1 oid 0x28c-0x28c.7 (1)
+  0x028|                                    2a         |            *   |                            [1]: 2 oid 0x28c-0x28c.7 (1)
+  0x028|                                       86 48   |             .H |                            [2]: 840 oid 0x28d-0x28e.7 (2)
+  0x028|                                             ce|               .|                            [3]: 10040 oid 0x28f-0x290.7 (2)
+  0x029|38                                             |8               |
+  0x029|   04                                          | .              |                            [4]: 4 oid 0x291-0x291.7 (1)
+  0x029|      03                                       |  .             |                            [5]: 3 oid 0x292-0x292.7 (1)
+       |                                               |                |                    [2]{}: object 0x293-0x2c3.7 (49)
+  0x029|         03                                    |   .            |                      class: "universal" (0) 0x293-0x293.1 (0.2)
+  0x029|         03                                    |   .            |                      form: "primitive" (0) 0x293.2-0x293.2 (0.1)
+  0x029|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x293.3-0x293.7 (0.5)
+  0x029|            2f                                 |    /           |                      length: 47 0x294-0x294.7 (1)
+  0x029|               00                              |     .          |                      unused_bits_count: 0 0x295-0x295.7 (1)
+  0x029|                  30 2c 02 14 52 31 f8 06 82 70|      0,..R1...p|                      value: raw bits 0x296-0x2c3.7 (46)
+  0x02a|cd 8e ed dd be 72 ec 66 5d 79 45 c1 49 7f 02 14|.....r.f]yE.I...|
+  *    |until 0x2c3.7 (46)                             |                |
+       |                                               |                |        [2]{}: record 0x2c4-0x387.7 (196)
+  0x02c|            16                                 |    .           |          type: "handshake" (22) (valid) 0x2c4-0x2c4.7 (1)
+  0x02c|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x2c5-0x2c6.7 (2)
+  0x02c|                     00 bf                     |       ..       |          length: 191 0x2c7-0x2c8.7 (2)
+       |                                               |                |          message{}: 0x2c9-0x387.7 (191)
+  0x02c|                           0c                  |         .      |            type: "server_key_exchange" (12) 0x2c9-0x2c9.7 (1)
+  0x02c|                              00 00 bb         |          ...   |            length: 187 0x2ca-0x2cc.7 (3)
+  0x02c|                                       00 40 da|             .@.|            data: raw bits 0x2cd-0x387.7 (187)
+  0x02d|58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c ca 92 dd|X<..."....uoL...|
+  *    |until 0x387.7 (187)                            |                |
+       |                                               |                |        [3]{}: record 0x388-0x390.7 (9)
+  0x038|                        16                     |        .       |          type: "handshake" (22) (valid) 0x388-0x388.7 (1)
+  0x038|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x389-0x38a.7 (2)
+  0x038|                                 00 04         |           ..   |          length: 4 0x38b-0x38c.7 (2)
+       |                                               |                |          message{}: 0x38d-0x390.7 (4)
+  0x038|                                       0e      |             .  |            type: "server_hello_done" (14) 0x38d-0x38d.7 (1)
+  0x038|                                          00 00|              ..|            length: 0 0x38e-0x390.7 (3)
+  0x039|00                                             |.               |
+       |                                               |                |            data: raw bits 0x391-NA (0)
+       |                                               |                |        [4]{}: record 0x391-0x43f.7 (175)
+  0x039|   16                                          | .              |          type: "handshake" (22) (valid) 0x391-0x391.7 (1)
+  0x039|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x392-0x393.7 (2)
+  0x039|            00 aa                              |    ..          |          length: 170 0x394-0x395.7 (2)
+       |                                               |                |          message{}: 0x396-0x43f.7 (170)
+  0x039|                  04                           |      .         |            type: "new_session_ticket" (4) 0x396-0x396.7 (1)
+  0x039|                     00 00 a6                  |       ...      |            length: 166 0x397-0x399.7 (3)
+  0x039|                              00 00 01 2c      |          ...,  |            lifetime_hint: 300 0x39a-0x39d.7 (4)
+  0x039|                                          00 a0|              ..|            ticket_length: 160 0x39e-0x39f.7 (2)
+  0x03a|22 07 b4 d8 97 c7 0f f3 0f f1 4b c1 4b d0 cb 8e|".........K.K...|            ticket: raw bits 0x3a0-0x43f.7 (160)
+  *    |until 0x43f.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x440-0x445.7 (6)
+  0x044|14                                             |.               |          type: "change_cipher_spec" (20) (valid) 0x440-0x440.7 (1)
+  0x044|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x441-0x442.7 (2)
+  0x044|         00 01                                 |   ..           |          length: 1 0x443-0x444.7 (2)
+       |                                               |                |          message{}: 0x445-0x445.7 (1)
+  0x044|               01                              |     .          |            type: 1 0x445-0x445.7 (1)
+       |                                               |                |        [6]{}: record 0x446-0x48a.7 (69)
+  0x044|                  16                           |      .         |          type: "handshake" (22) (valid) 0x446-0x446.7 (1)
+  0x044|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x447-0x448.7 (2)
+  0x044|                           00 40               |         .@     |          length: 64 0x449-0x44a.7 (2)
+  0x044|                                 d2 b9 8c 04 00|           .....|          encrypted_data: raw bits 0x44b-0x48a.7 (64)
+  0x045|30 19 4c 86 bb 3a 6f ad be fd 04 54 24 49 88 1d|0.L..:o....T$I..|
+  *    |until 0x48a.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x48b-0x91f.7 (1173)
+  0x048|                                 17            |           .    |          type: "application_data" (23) (valid) 0x48b-0x48b.7 (1)
+  0x048|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x48c-0x48d.7 (2)
+  0x048|                                          04 90|              ..|          length: 1168 0x48e-0x48f.7 (2)
+  0x049|c5 94 61 94 58 b2 1c 06 08 07 99 5f fc ca 4f 91|..a.X......_..O.|          encrypted_data: raw bits 0x490-0x91f.7 (1168)
+  *    |until 0x91f.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA.pcap.fqtest

@@ -0,0 +1,467 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe11-NA (0)
+          |                                               |                |  client{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 39032 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: false 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             ed|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|30 9b 0d f7 1e 97 f6 fe 7a 56 30 11 5a 73 a0 31|0.......zV0.Zs.1|
+  0x000002|a8 66 00 44 ac 05 34 93 45 e0 78               |.f.D..4.E.x     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 14|              ..|              [0]: "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA" (0x14) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+  0x000006|                                             00|               .|            data: raw bits 0x6f-0xb0.7 (66)
+  0x000007|40 d6 77 9f 62 48 6f ee ef b0 aa 9b 7b 54 df b3|@.w.bHo.....{T..|
+  *       |until 0xb0.7 (66)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    82 db 08 8f|            ....|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|4b bb 7d 6c 94 3a 09 e4 4b c3 cc 0a 8d c6 71 01|K.}l.:..K.....q.|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            a4 28 37 aa eb 85 0d 20 47 fe b6 17|    .(7.... G...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           29 32 64 3c bb 0d dc|         )2d<...|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|68 e2 e4 be ca 62 5e 88 cd 68 b6 7d 2a 42 e5 3d|h....b^..h.}*B.=|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  d9 02 83 1f 73 af 66 f1 93 e5|      ....s.f...|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|a3 98 93 03 1d dc 96 8c f7 41 1e a8 cd ca b6 6c|.........A.....l|
+  0x000015|fe 93 85 0f b7 02 fd 9a f6 98 bd fb 25 11|     |............%.| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 4430 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: true 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x89a.7 (2203)
+          |                                               |                |      records[0:8]: 0x0-0x89a.7 (2203)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             c0|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|3c 59 90 2c ba 81 31 da 7b 1d d9 1a 63 c2 18 56|<Y.,..1.{...c..V|
+  0x000002|7a af ee 85 4a 6f 68 df af 80 2c               |z...Joh...,     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 14      |            ..  |            cipher_suit: "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA" (0x14) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 e7 7f e0 8f 45 e6 d0 61 07 fe 7f 70 b7|.~1....E..a...p.|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x415.7 (61)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 38      |            .8  |          length: 56 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          65 45|              eE|          encrypted_data: raw bits 0x3de-0x415.7 (56)
+  0x00003e|28 3f 6f 8c d7 57 38 19 87 9f 9f c2 4a 6c 83 ca|(?o..W8.....Jl..|
+  *       |until 0x415.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            6a 8f 70 d9 85 d9 30 c1 18 c9 ff 79|    j.p...0....y|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x416-0x89a.7 (1157)
+  0x000041|                  17                           |      .         |          type: "application_data" (23) (valid) 0x416-0x416.7 (1)
+  0x000041|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x417-0x418.7 (2)
+  0x000041|                           04 80               |         ..     |          length: 1152 0x419-0x41a.7 (2)
+  0x000041|                                 21 ee 3c 13 d5|           !.<..|          encrypted_data: raw bits 0x41b-0x89a.7 (1152)
+  0x000042|48 45 40 1e 80 a2 7a 66 ca 5a e7 42 d5 f8 01 5b|HE@...zf.Z.B...[|
+  *       |until 0x89a.7 (end) (1152)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest

@@ -0,0 +1,470 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe11-NA (0)
+          |                                               |                |  client{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 38990 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: false 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             a4|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|0a 0c 4b ef 4c 36 b3 42 77 49 49 56 34 9f 15 ca|..K.L6.BwIIV4...|
+  0x000002|71 e3 76 7f a2 d2 09 a2 f9 c4 db               |q.v........     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 16|              ..|              [0]: "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" (0x16) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   1e b2 67 6a 75 bd c2 26 51 88 cf 21 36 b4 17| ..gju..&Q..!6..|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|34 e3 dc e2 bb b0 df b7 09 69 55 f5 95 f5 80 15|4........iU.....|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    3a 52 ec 17|            :R..|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|ef 46 9c 9e 67 64 5c 0c 44 1a 0a c8 49 b3 d1 07|.F..gd\.D...I...|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            19 5c 08 f3 d6 04 92 1c b4 47 3b e6|    .\.......G;.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           bd c1 bf d9 ab e6 a7|         .......|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|b1 b3 2c 46 b5 ed a6 17 c6 a0 e5 58 b6 6d 5c d4|..,F.......X.m\.|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  84 77 65 ff 8a 86 6b ae f4 52|      .we...k..R|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|30 0f bc 1e e7 b9 9f fe 92 0e 12 ee 61 e0 07 d8|0...........a...|
+  0x000015|cc ff 54 13 31 38 d5 59 f5 31 e7 c5 4c a3|     |..T.18.Y.1..L.| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 4430 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: true 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x89a.7 (2203)
+          |                                               |                |      records[0:8]: 0x0-0x89a.7 (2203)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             18|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|23 52 a6 de 7f a1 69 11 c5 81 1a 3d 59 a0 02 02|#R....i....=Y...|
+  0x000002|6c 89 40 f9 71 54 84 08 86 cc 75               |l.@.qT....u     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 16      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA" (0x16) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 d3 58 5e 2a be 0b 3d 2f da ba 0f e8 fa|.~1.X^*..=/.....|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x415.7 (61)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 38      |            .8  |          length: 56 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          e8 b9|              ..|          encrypted_data: raw bits 0x3de-0x415.7 (56)
+  0x00003e|94 85 57 e4 b9 6a 16 4b 1e d3 3e 04 b5 d4 0b ca|..W..j.K..>.....|
+  *       |until 0x415.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            84 c7 25 35 57 4c 10 3c dd c8 71 b9|    ..%5WL.<..q.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x416-0x89a.7 (1157)
+  0x000041|                  17                           |      .         |          type: "application_data" (23) (valid) 0x416-0x416.7 (1)
+  0x000041|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x417-0x418.7 (2)
+  0x000041|                           04 80               |         ..     |          length: 1152 0x419-0x41a.7 (2)
+  0x000041|                                 49 2e 34 91 24|           I.4.$|          encrypted_data: raw bits 0x41b-0x89a.7 (1152)
+  0x000042|91 fd e6 24 de 56 6d aa 98 b7 fe a7 f5 a5 55 77|...$.Vm.......Uw|
+  *       |until 0x89a.7 (end) (1152)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,472 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe41-NA (0)
+          |                                               |                |  client{}: 0xe41-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+          |                                               |                |    port: 39005 0xe41-NA (0)
+          |                                               |                |    has_start: true 0xe41-NA (0)
+          |                                               |                |    has_end: false 0xe41-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+          |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             eb|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|bd 2d 07 96 81 54 9d fd d3 16 1f 69 4b fc c2 c6|.-...T.....iK...|
+  0x000002|a7 6a f6 c7 fe 8f 4c e8 ce d3 f7               |.j....L....     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 33|              .3|              [0]: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" (0x33) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   ab d4 cd 68 c7 67 b2 79 a4 f2 c7 6a 66 d9 04| ...h.g.y...jf..|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|f1 a6 70 cd e3 57 26 dc 97 8f c3 60 10 e3 62 bb|..p..W&....`..b.|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00000b|                                    ca 4f 46 b9|            .OF.|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00000c|d5 4a 34 c4 3e 9f df 12 6b ae 6f e4 f8 a9 f8 8a|.J4.>...k.o.....|
+  *       |until 0xfb.7 (64)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            86 92 16 88 1a d7 da e7 4c 28 06 da|    ........L(..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00000f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00000f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00000f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x000010|40                                             |@               |
+  0x000010|   72 b4 30 1d c6 92 e5 ce 87 51 a5 67 76 c6 2e| r.0......Q.gv..|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x000011|a9 cc 3e c1 6b 82 d4 f0 65 40 ba 2b ea b0 90 37|..>.k...e@.+...7|
+  *       |until 0x140.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x000014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x000014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x000014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x000014|                  02 41 77 da 9f 6d fd 26 82 07|      .Aw..m.&..|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x000015|06 28 e5 56 51 e3 f8 11 93 92 cc 0d c1 0a 68 cf|.(.VQ.........h.|
+  *       |until 0x175.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe41-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+          |                                               |                |    port: 4430 0xe41-NA (0)
+          |                                               |                |    has_start: true 0xe41-NA (0)
+          |                                               |                |    has_end: true 0xe41-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b2.7 (2227)
+          |                                               |                |      records[0:8]: 0x0-0x8b2.7 (2227)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             90|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|62 b6 d7 db b5 3b 00 30 7d 47 43 10 47 0b 56 48|b....;.0}GC.G.VH|
+  0x000002|56 8c 86 aa df c9 0b 2b 3a 15 5c               |V......+:.\     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 33      |            .3  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" (0x33) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 55 06 5b 20 e2 7d 0b d1 21 f1 12 71 e5|.~1U.[ .}..!..q.|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x41d.7 (69)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 40      |            .@  |          length: 64 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          58 ac|              X.|          encrypted_data: raw bits 0x3de-0x41d.7 (64)
+  0x00003e|e8 9e d5 37 ac 22 1f 53 6d c4 72 a0 16 2e 7e cc|...7.".Sm.r...~.|
+  *       |until 0x41d.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            03 22 75 55 48 a7 97 60 fd cc a0 5e|    ."uUH..`...^|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x41e-0x8b2.7 (1173)
+  0x000041|                                          17   |              . |          type: "application_data" (23) (valid) 0x41e-0x41e.7 (1)
+  0x000041|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x41f-0x420.7 (2)
+  0x000042|03                                             |.               |
+  0x000042|   04 90                                       | ..             |          length: 1168 0x421-0x422.7 (2)
+  0x000042|         fb e1 04 a0 4f 51 1f 0b 00 92 6b e2 18|   ....OQ....k..|          encrypted_data: raw bits 0x423-0x8b2.7 (1168)
+  0x000043|ed 91 f1 cb 72 14 4f ba f6 da 99 00 82 96 c5 a1|....r.O.........|
+  *       |until 0x8b2.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,472 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe91-NA (0)
+          |                                               |                |  client{}: 0xe91-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe91-NA (0)
+          |                                               |                |    port: 39003 0xe91-NA (0)
+          |                                               |                |    has_start: true 0xe91-NA (0)
+          |                                               |                |    has_end: false 0xe91-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe91-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1a5.7 (422)
+          |                                               |                |      records[0:6]: 0x0-0x1a5.7 (422)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             9b|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|62 cb b2 3d ce 19 27 ec 4b 86 1e ee 45 a7 fb 39|b..=..'.K...E..9|
+  0x000002|b0 99 95 9e ca e5 63 7b 7b 69 ae               |......c{{i.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 67|              .g|              [0]: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" (0x67) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   3f 0e 8f d7 01 d3 a4 b2 52 69 9f 98 e3 d4 63| ?.......Ri....c|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|41 38 9d e5 5e 80 ea 60 79 00 bb 20 d2 9b 81 1d|A8..^..`y.. ....|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0x10b.7 (85)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 50            |          .P    |          length: 80 0xba-0xbb.7 (2)
+  0x00000b|                                    5b 35 9a ca|            [5..|          encrypted_data: raw bits 0xbc-0x10b.7 (80)
+  0x00000c|a0 61 9d 9f eb 09 b1 4f 80 f3 e3 fc 3d ed 28 82|.a.....O....=.(.|
+  *       |until 0x10b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5a b7 55 e0 14 39 36 05 1a d4 57 31|    Z.U..96...W1|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x10c-0x160.7 (85)
+  0x000010|                                    17         |            .   |          type: "application_data" (23) (valid) 0x10c-0x10c.7 (1)
+  0x000010|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x10d-0x10e.7 (2)
+  0x000010|                                             00|               .|          length: 80 0x10f-0x110.7 (2)
+  0x000011|50                                             |P               |
+  0x000011|   12 99 21 23 28 b8 ae c5 b7 ff 65 08 55 1d 0d| ..!#(.....e.U..|          encrypted_data: raw bits 0x111-0x160.7 (80)
+  0x000012|df 45 94 ac 6e c4 eb dd d1 89 a4 47 c2 54 70 02|.E..n......G.Tp.|
+  *       |until 0x160.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x161-0x1a5.7 (69)
+  0x000016|   15                                          | .              |          type: "alert" (21) (valid) 0x161-0x161.7 (1)
+  0x000016|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x162-0x163.7 (2)
+  0x000016|            00 40                              |    .@          |          length: 64 0x164-0x165.7 (2)
+  0x000016|                  d8 eb 13 04 b1 3d b8 8b 2b e6|      .....=..+.|          encrypted_data: raw bits 0x166-0x1a5.7 (64)
+  0x000017|0b 57 18 db 9c 12 69 db ae b8 19 53 47 1d 5a 9e|.W....i....SG.Z.|
+  *       |until 0x1a5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe91-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe91-NA (0)
+          |                                               |                |    port: 4430 0xe91-NA (0)
+          |                                               |                |    has_start: true 0xe91-NA (0)
+          |                                               |                |    has_end: true 0xe91-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe91-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8d2.7 (2259)
+          |                                               |                |      records[0:8]: 0x0-0x8d2.7 (2259)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             42|               B|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|c0 67 82 33 fd 02 0a 30 b2 02 d7 c1 f0 14 88 e6|.g.3...0........|
+  0x000002|b5 31 5d fd 39 5e 78 2c 49 94 5c               |.1].9^x,I.\     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 67      |            .g  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256" (0x67) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 68 7e 49 65 ec d4 38 22 54 64 88 4a b6|.~1h~Ie..8"Td.J.|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x42d.7 (85)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 50      |            .P  |          length: 80 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          15 2b|              .+|          encrypted_data: raw bits 0x3de-0x42d.7 (80)
+  0x00003e|f3 72 b5 50 62 f7 fa 25 eb cc 6d d7 aa 9f ae 7d|.r.Pb..%..m....}|
+  *       |until 0x42d.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            12 fc ff 80 2c 48 92 2b 50 57 0a a5|    ....,H.+PW..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x42e-0x8d2.7 (1189)
+  0x000042|                                          17   |              . |          type: "application_data" (23) (valid) 0x42e-0x42e.7 (1)
+  0x000042|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x42f-0x430.7 (2)
+  0x000043|03                                             |.               |
+  0x000043|   04 a0                                       | ..             |          length: 1184 0x431-0x432.7 (2)
+  0x000043|         11 a2 df 75 bb f9 ba aa fe 8f 7e 99 52|   ...u......~.R|          encrypted_data: raw bits 0x433-0x8d2.7 (1184)
+  0x000044|3b bb e6 a4 ab 68 6b 2b a1 9d d9 4f 9e 5c 07 0a|;....hk+...O.\..|
+  *       |until 0x8d2.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest

@@ -0,0 +1,470 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_GCM_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xdef-NA (0)
+          |                                               |                |  client{}: 0xdef-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdef-NA (0)
+          |                                               |                |    port: 39002 0xdef-NA (0)
+          |                                               |                |    has_start: true 0xdef-NA (0)
+          |                                               |                |    has_end: false 0xdef-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdef-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x146.7 (327)
+          |                                               |                |      records[0:6]: 0x0-0x146.7 (327)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             a5|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|5a b9 8a 58 29 60 07 57 9e 18 07 22 81 2d 40 03|Z..X)`.W...".-@.|
+  0x000002|f7 e0 99 d5 44 f3 03 0d c0 86 a9               |....D......     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 9e|              ..|              [0]: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" (0x9e) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   7d ae 2a c1 3c f5 e3 24 5f 68 12 fb 46 38 bb| }.*.<..$_h..F8.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|c8 77 5c b3 a0 15 52 a0 27 4e 21 29 39 04 9e 39|.w\...R.'N!)9..9|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xec.7 (54)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 31            |          .1    |          length: 49 0xba-0xbb.7 (2)
+  0x00000b|                                    bc ce 79 62|            ..yb|          encrypted_data: raw bits 0xbc-0xec.7 (49)
+  0x00000c|19 f2 67 f3 c7 90 ec 11 4c 4d aa 93 af ed d9 10|..g.....LM......|
+  *       |until 0xec.7 (49)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            53 0b e9 ed 98 7d d7 40 73 0c 14 49|    S....}.@s..I|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xed-0x121.7 (53)
+  0x00000e|                                       17      |             .  |          type: "application_data" (23) (valid) 0xed-0xed.7 (1)
+  0x00000e|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0xee-0xef.7 (2)
+  0x00000f|00 30                                          |.0              |          length: 48 0xf0-0xf1.7 (2)
+  0x00000f|      bc ce 79 62 19 f2 67 f4 9a 23 e2 6e da f3|  ..yb..g..#.n..|          encrypted_data: raw bits 0xf2-0x121.7 (48)
+  0x000010|2c 5c 47 32 12 f5 c2 cc e4 0a 7a 9f 04 f2 1b 00|,\G2......z.....|
+  *       |until 0x121.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x122-0x146.7 (37)
+  0x000012|      15                                       |  .             |          type: "alert" (21) (valid) 0x122-0x122.7 (1)
+  0x000012|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x123-0x124.7 (2)
+  0x000012|               00 20                           |     .          |          length: 32 0x125-0x126.7 (2)
+  0x000012|                     bc ce 79 62 19 f2 67 f5 c3|       ..yb..g..|          encrypted_data: raw bits 0x127-0x146.7 (32)
+  0x000013|f5 eb 38 c9 27 f9 e5 60 b6 0d 3b 0a ae 4a f6 0c|..8.'..`..;..J..|
+  0x000014|e1 2c 4f 51 3b c6 70|                          |.,OQ;.p|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xdef-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdef-NA (0)
+          |                                               |                |    port: 4430 0xdef-NA (0)
+          |                                               |                |    has_start: true 0xdef-NA (0)
+          |                                               |                |    has_end: true 0xdef-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdef-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x88f.7 (2192)
+          |                                               |                |      records[0:8]: 0x0-0x88f.7 (2192)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             84|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ee 47 56 a6 f0 ad 44 00 75 b9 17 3f 1a 81 0b d6|.GV...D.u..?....|
+  0x000002|43 17 cb d5 5d 1e 58 e0 60 a3 10               |C...].X.`..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 9e      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256" (0x9e) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 ad 44 60 af ee 5f 0e 8b dc df 9d 3b 75|.~1.D`.._.....;u|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x40e.7 (54)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 31      |            .1  |          length: 49 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          bd ee|              ..|          encrypted_data: raw bits 0x3de-0x40e.7 (49)
+  0x00003e|60 a8 40 ac eb c8 73 59 4e 6a 4f 37 88 e4 37 d1|`.@...sYNjO7..7.|
+  *       |until 0x40e.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            71 5b 6d bd b9 d8 4c 2d cd 37 d0 ac|    q[m...L-.7..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x40f-0x88f.7 (1153)
+  0x000040|                                             17|               .|          type: "application_data" (23) (valid) 0x40f-0x40f.7 (1)
+  0x000041|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x410-0x411.7 (2)
+  0x000041|      04 7c                                    |  .|            |          length: 1148 0x412-0x413.7 (2)
+  0x000041|            bd ee 60 a8 40 ac eb c9 3d ea fd 1f|    ..`.@...=...|          encrypted_data: raw bits 0x414-0x88f.7 (1148)
+  0x000042|e2 ff 8b 2e c4 cd 89 bf b3 ff 80 a7 e8 da b3 93|................|
+  *       |until 0x88f.7 (end) (1148)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1144.7 (4421)
+    *     |until 0x1144.7 (end) (4421)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1144.7 (4421)
+    *     |until 0x1144.7 (end) (4421)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,472 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe41-NA (0)
+          |                                               |                |  client{}: 0xe41-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+          |                                               |                |    port: 38974 0xe41-NA (0)
+          |                                               |                |    has_start: true 0xe41-NA (0)
+          |                                               |                |    has_end: false 0xe41-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+          |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             71|               q|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ed fc 0b 34 3a 50 33 26 a7 d2 17 73 9e d8 26 2f|...4:P3&...s..&/|
+  0x000002|c4 74 8d 49 4e 38 31 f1 28 58 94               |.t.IN81.(X.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 39|              .9|              [0]: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA" (0x39) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   71 42 ed de f2 e9 d1 cc b0 d6 0c 12 69 60 ac| qB..........i`.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|7d 22 bd 65 b6 e6 1d 83 f1 0b 74 c9 18 fd c2 96|}".e......t.....|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00000b|                                    f9 2e 46 07|            ..F.|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00000c|0b d3 5d b8 28 6f f5 0a ff 06 30 47 a0 cc 34 42|..].(o....0G..4B|
+  *       |until 0xfb.7 (64)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            90 85 65 83 47 88 c2 d8 d0 34 4f aa|    ..e.G....4O.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00000f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00000f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00000f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x000010|40                                             |@               |
+  0x000010|   a2 bc 4d 82 9a af 67 43 8a 83 e6 03 6d ce 47| ..M...gC....m.G|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x000011|80 cf cb ac e1 ae ed a3 6d c2 dc 59 2b 6a 93 82|........m..Y+j..|
+  *       |until 0x140.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x000014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x000014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x000014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x000014|                  ad e4 ab 3a 44 ce e9 85 c5 8e|      ...:D.....|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x000015|ae cd 52 48 f9 f8 de 23 29 4e be a1 41 59 50 2a|..RH...#)N..AYP*|
+  *       |until 0x175.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe41-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+          |                                               |                |    port: 4430 0xe41-NA (0)
+          |                                               |                |    has_start: true 0xe41-NA (0)
+          |                                               |                |    has_end: true 0xe41-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b2.7 (2227)
+          |                                               |                |      records[0:8]: 0x0-0x8b2.7 (2227)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             af|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|bd 2d 19 74 cd 2f 1d 49 16 82 5c 3b 8b 10 af 81|.-.t./.I..\;....|
+  0x000002|f4 3a 1c 06 97 06 c2 11 e6 77 c6               |.:.......w.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 39      |            .9  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA" (0x39) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 ac 0b ef c8 6a a9 e0 0d 7b 3e 38 eb 86|.~1....j...{>8..|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x41d.7 (69)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 40      |            .@  |          length: 64 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          c7 83|              ..|          encrypted_data: raw bits 0x3de-0x41d.7 (64)
+  0x00003e|ab a5 4c 4b ba 6c 94 ac b0 76 03 e0 9a ce 2c 45|..LK.l...v....,E|
+  *       |until 0x41d.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            d4 20 2d 36 96 8d 51 1a 99 db da 53|    . -6..Q....S|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x41e-0x8b2.7 (1173)
+  0x000041|                                          17   |              . |          type: "application_data" (23) (valid) 0x41e-0x41e.7 (1)
+  0x000041|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x41f-0x420.7 (2)
+  0x000042|03                                             |.               |
+  0x000042|   04 90                                       | ..             |          length: 1168 0x421-0x422.7 (2)
+  0x000042|         b0 8a c0 99 5b dc fd 9e d9 2d bd 64 71|   ....[....-.dq|          encrypted_data: raw bits 0x423-0x8b2.7 (1168)
+  0x000043|4d 9f 8b ff 20 2c e0 5f 7a 26 7d fb 7e 87 1e fd|M... ,._z&}.~...|
+  *       |until 0x8b2.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x112f.7 (4400)
+    *     |until 0x112f.7 (end) (4400)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,472 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe91-NA (0)
+          |                                               |                |  client{}: 0xe91-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe91-NA (0)
+          |                                               |                |    port: 38972 0xe91-NA (0)
+          |                                               |                |    has_start: true 0xe91-NA (0)
+          |                                               |                |    has_end: false 0xe91-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe91-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1a5.7 (422)
+          |                                               |                |      records[0:6]: 0x0-0x1a5.7 (422)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             29|               )|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|0c 68 b9 82 37 44 f8 a8 27 1f 85 ff a8 ec c0 18|.h..7D..'.......|
+  0x000002|ed 36 12 c4 2c ea d9 97 76 d8 fa               |.6..,...v..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 6b|              .k|              [0]: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" (0x6b) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   01 40 0f 2e 1a f4 71 8a 3a b5 fa a7 76 68 b6| .@....q.:...vh.|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|22 d6 fe e3 80 8f cd 61 23 c7 e9 99 8a aa 77 74|"......a#.....wt|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0x10b.7 (85)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 50            |          .P    |          length: 80 0xba-0xbb.7 (2)
+  0x00000b|                                    71 42 24 57|            qB$W|          encrypted_data: raw bits 0xbc-0x10b.7 (80)
+  0x00000c|bd 39 d3 08 ad e3 45 1f 35 8e 7c a9 eb 7f 35 96|.9....E.5.|...5.|
+  *       |until 0x10b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            f8 1d 53 5a 50 7b 11 95 2b b3 3a 4b|    ..SZP{..+.:K|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x10c-0x160.7 (85)
+  0x000010|                                    17         |            .   |          type: "application_data" (23) (valid) 0x10c-0x10c.7 (1)
+  0x000010|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x10d-0x10e.7 (2)
+  0x000010|                                             00|               .|          length: 80 0x10f-0x110.7 (2)
+  0x000011|50                                             |P               |
+  0x000011|   0c 63 87 53 29 c8 c9 3a 2c 1d e4 7e 2c 93 dc| .c.S)..:,..~,..|          encrypted_data: raw bits 0x111-0x160.7 (80)
+  0x000012|03 c2 f9 ac 9a d6 6b 33 39 6c 39 8c 0e 61 05 aa|......k39l9..a..|
+  *       |until 0x160.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x161-0x1a5.7 (69)
+  0x000016|   15                                          | .              |          type: "alert" (21) (valid) 0x161-0x161.7 (1)
+  0x000016|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x162-0x163.7 (2)
+  0x000016|            00 40                              |    .@          |          length: 64 0x164-0x165.7 (2)
+  0x000016|                  e0 5f 68 d3 b9 94 d7 99 e0 82|      ._h.......|          encrypted_data: raw bits 0x166-0x1a5.7 (64)
+  0x000017|8e c1 d0 f4 8b c3 ef 30 ba 6f cc c6 cf be 68 73|.......0.o....hs|
+  *       |until 0x1a5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe91-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe91-NA (0)
+          |                                               |                |    port: 4430 0xe91-NA (0)
+          |                                               |                |    has_start: true 0xe91-NA (0)
+          |                                               |                |    has_end: true 0xe91-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe91-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8d2.7 (2259)
+          |                                               |                |      records[0:8]: 0x0-0x8d2.7 (2259)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             bf|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|2c 1e f4 6b 0a cf 58 1b b3 f9 8c 7a 85 72 91 b2|,..k..X....z.r..|
+  0x000002|60 a4 9a 26 20 00 7a 8b f7 cd eb               |`..& .z....     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 6b      |            .k  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" (0x6b) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 8b 68 ec 20 60 08 44 83 3b 3b 93 aa 2d|.~1.h. `.D.;;..-|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x42d.7 (85)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 50      |            .P  |          length: 80 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          63 1f|              c.|          encrypted_data: raw bits 0x3de-0x42d.7 (80)
+  0x00003e|bc e0 97 60 d3 0b a9 e7 92 7f 70 44 9e 5c cc a9|...`......pD.\..|
+  *       |until 0x42d.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            34 f7 99 84 c3 ec 39 26 b3 e4 ed 77|    4.....9&...w|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x42e-0x8d2.7 (1189)
+  0x000042|                                          17   |              . |          type: "application_data" (23) (valid) 0x42e-0x42e.7 (1)
+  0x000042|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x42f-0x430.7 (2)
+  0x000043|03                                             |.               |
+  0x000043|   04 a0                                       | ..             |          length: 1184 0x431-0x432.7 (2)
+  0x000043|         9d 4c 1c df 07 e5 34 8b f7 a4 45 17 a9|   .L....4...E..|          encrypted_data: raw bits 0x433-0x8d2.7 (1184)
+  0x000044|b5 b0 00 93 10 ed b6 b1 4d 7d a9 cb 5b b4 50 06|........M}..[.P.|
+  *       |until 0x8d2.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1138.7 (4409)
+    *     |until 0x1138.7 (end) (4409)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest

@@ -0,0 +1,471 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_GCM_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xdeb-NA (0)
+          |                                               |                |  client{}: 0xdeb-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdeb-NA (0)
+          |                                               |                |    port: 38971 0xdeb-NA (0)
+          |                                               |                |    has_start: true 0xdeb-NA (0)
+          |                                               |                |    has_end: false 0xdeb-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdeb-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x145.7 (326)
+          |                                               |                |      records[0:6]: 0x0-0x145.7 (326)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             91|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|5a 44 47 0a 8e d3 31 d7 d3 be 3b c0 05 bf b1 86|ZDG...1...;.....|
+  0x000002|9f da 5d 96 b1 22 f9 00 20 b0 56               |..]..".. .V     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 9f|              ..|              [0]: "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" (0x9f) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   17 69 70 90 76 dd f2 2d 34 05 7b 0e 8e b6 c5| .ip.v..-4.{....|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|15 9a 49 d5 6d 3a 86 73 5a a5 e7 d9 c6 5d ec dc|..I.m:.sZ....]..|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xeb.7 (53)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 30            |          .0    |          length: 48 0xba-0xbb.7 (2)
+  0x00000b|                                    8b dc 1b 06|            ....|          encrypted_data: raw bits 0xbc-0xeb.7 (48)
+  0x00000c|37 de 02 d1 8d 04 f0 a2 91 46 62 fd 46 d1 0a 38|7........Fb.F..8|
+  *       |until 0xeb.7 (48)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            b6 27 3d 2b 73 8e bb a6 49 3b 1e 3b|    .'=+s...I;.;|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xec-0x120.7 (53)
+  0x00000e|                                    17         |            .   |          type: "application_data" (23) (valid) 0xec-0xec.7 (1)
+  0x00000e|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|          length: 48 0xef-0xf0.7 (2)
+  0x00000f|30                                             |0               |
+  0x00000f|   8b dc 1b 06 37 de 02 d2 f2 42 85 10 cf 22 d6| ....7....B...".|          encrypted_data: raw bits 0xf1-0x120.7 (48)
+  0x000010|9f 31 f0 c4 da 6d c4 2d 1b 41 0d ad d9 1b 57 20|.1...m.-.A....W |
+  *       |until 0x120.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x121-0x145.7 (37)
+  0x000012|   15                                          | .              |          type: "alert" (21) (valid) 0x121-0x121.7 (1)
+  0x000012|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x122-0x123.7 (2)
+  0x000012|            00 20                              |    .           |          length: 32 0x124-0x125.7 (2)
+  0x000012|                  8b dc 1b 06 37 de 02 d3 38 cd|      ....7...8.|          encrypted_data: raw bits 0x126-0x145.7 (32)
+  0x000013|82 da 84 73 f9 1b 03 fb c9 89 ed b8 89 9a d4 d2|...s............|
+  0x000014|36 a1 33 a1 46 e9|                             |6.3.F.|         |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xdeb-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdeb-NA (0)
+          |                                               |                |    port: 4430 0xdeb-NA (0)
+          |                                               |                |    has_start: true 0xdeb-NA (0)
+          |                                               |                |    has_end: true 0xdeb-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdeb-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x88c.7 (2189)
+          |                                               |                |      records[0:8]: 0x0-0x88c.7 (2189)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             51|               Q|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|7b b5 ca 80 a2 fb 76 ca 07 91 08 e3 62 2a 81 e5|{.....v.....b*..|
+  0x000002|1a c6 80 f8 f5 9d 23 c0 93 0e bd               |......#....     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 9f      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" (0x9f) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 c1 02 1c 56 25 93 e2 93 99 01 aa 9d 69|.~1...V%.......i|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x40e.7 (54)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 31      |            .1  |          length: 49 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          df e2|              ..|          encrypted_data: raw bits 0x3de-0x40e.7 (49)
+  0x00003e|34 b3 ce 10 0c 85 96 f4 15 68 f8 58 c4 e3 c3 6f|4........h.X...o|
+  *       |until 0x40e.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ba d1 56 0d d7 e2 8b d2 f5 7f 1f d0|    ..V.........|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x40f-0x88c.7 (1150)
+  0x000040|                                             17|               .|          type: "application_data" (23) (valid) 0x40f-0x40f.7 (1)
+  0x000041|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x410-0x411.7 (2)
+  0x000041|      04 79                                    |  .y            |          length: 1145 0x412-0x413.7 (2)
+  0x000041|            df e2 34 b3 ce 10 0c 86 80 d6 de 73|    ..4........s|          encrypted_data: raw bits 0x414-0x88c.7 (1145)
+  0x000042|77 fe 9a 6b c1 4d bc 4d db f4 97 75 d7 47 5b ff|w..k.M.M...u.G[.|
+  *       |until 0x88c.7 (end) (1145)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1144.7 (4421)
+    *     |until 0x1144.7 (end) (4421)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1144.7 (4421)
+    *     |until 0x1144.7 (end) (4421)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,449 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe41-NA (0)
+       |                                               |                |  client{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 39009 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: false 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             42|               B|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|a6 d3 1f 25 0f f0 eb e4 49 1f bb cc 36 ca 46 87|...%....I...6.F.|
+  0x002|94 f3 57 58 cb a7 d1 70 8e a6 16               |..WX...p...     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 45|              .E|              [0]: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" (0x45) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   78 cf 14 5e a5 97 a7 28 c5 2d ab d3 82 b4 86| x..^...(.-.....|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|0d 1c 4f 9f 14 18 b2 6b 51 aa a5 d5 38 dd 4a 89|..O....kQ...8.J.|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    86 b5 52 fa|            ..R.|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|2c f1 ac c7 7a 95 e7 6f 39 8e 53 07 44 c7 7b e6|,...z..o9.S.D.{.|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   77 3c 83 82 fc 5c a0 06 c6 ed 94 a0 c8 4f c9| w<...\.......O.|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|63 52 dc 71 bc 5e b5 cc 21 7e 4f c5 35 68 95 c8|cR.q.^..!~O.5h..|
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  bb 18 8d 5e 5a 69 19 be 38 a4|      ...^Zi..8.|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|db 14 fd ec 9c 4e 0e 7d f6 0d 4f 19 2f f9 02 1a|.....N.}..O./...|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 4430 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: true 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b2.7 (2227)
+       |                                               |                |      records[0:8]: 0x0-0x8b2.7 (2227)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             9d|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|3e 05 5c 14 3e fc b4 4f cf ba 69 56 85 04 44 65|>.\.>..O..iV..De|
+  0x002|c0 70 5a 6b 71 a8 6c 75 7b 84 2a               |.pZkq.lu{.*     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 45      |            .E  |            cipher_suit: "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" (0x45) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+       |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x005|01 b5                                          |..              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+       |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x006|c4                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+       |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+       |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+       |                                               |                |                              value: null 0x70-NA (0)
+       |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+       |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+       |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+       |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+       |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+       |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x009|41                                             |A               |
+       |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+       |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00a|30 5a                                          |0Z              |
+       |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00b|5a                                             |Z               |
+       |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+       |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+       |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+       |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00d|53 41                                          |SA              |
+       |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+       |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+       |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+       |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+       |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+       |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+       |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+       |                                               |                |                                  value: null 0xe4-NA (0)
+       |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *    |until 0x173.7 (140)                            |                |
+       |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+       |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+       |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+       |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+       |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+       |                                               |                |                          value: null 0x183-NA (0)
+       |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *    |until 0x206.7 (128)                            |                |
+       |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+       |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *    |until 0x31a.7 (267)                            |                |
+       |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+       |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+       |                                               |                |            data: raw bits 0x324-NA (0)
+       |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+       |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x033|2c                                             |,               |
+  0x033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x034|a1 7e 31 ba a9 0c a6 98 21 24 ae 66 fe 5c c6 89|.~1.....!$.f.\..|
+  *    |until 0x3d2.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x03d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x03d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x03d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+       |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x03d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+       |                                               |                |        [6]{}: record 0x3d9-0x41d.7 (69)
+  0x03d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x03d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x03d|                                    00 40      |            .@  |          length: 64 0x3dc-0x3dd.7 (2)
+  0x03d|                                          96 60|              .`|          encrypted_data: raw bits 0x3de-0x41d.7 (64)
+  0x03e|9d fe 28 02 b2 fd bd 3f 7e e2 64 7d 71 34 87 7a|..(....?~.d}q4.z|
+  *    |until 0x41d.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x41e-0x8b2.7 (1173)
+  0x041|                                          17   |              . |          type: "application_data" (23) (valid) 0x41e-0x41e.7 (1)
+  0x041|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x41f-0x420.7 (2)
+  0x042|03                                             |.               |
+  0x042|   04 90                                       | ..             |          length: 1168 0x421-0x422.7 (2)
+  0x042|         ba d8 c1 9f 69 35 73 d1 60 37 59 91 28|   ....i5s.`7Y.(|          encrypted_data: raw bits 0x423-0x8b2.7 (1168)
+  0x043|7c 82 c6 8f 45 84 80 a6 a1 2d d3 b8 9e 5c a1 72||...E....-...\.r|
+  *    |until 0x8b2.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,449 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe41-NA (0)
+       |                                               |                |  client{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 38976 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: false 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000|                                             7b|               {|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|28 cf ec 4c 36 b8 12 8b 63 c1 38 85 4e a0 fb de|(..L6...c.8.N...|
+  0x002|98 fd 4f 3f 14 e0 fe 19 5d 61 96               |..O?....]a.     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 88|              ..|              [0]: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" (0x88) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   71 26 09 ed f6 3a d4 cf c6 a8 70 8b c9 00 35| q&...:....p...5|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|c1 48 20 23 05 0f 24 3c 8b 70 72 d3 5f 7e e1 30|.H #..$<.pr._~.0|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    e0 28 a4 e7|            .(..|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|45 45 8a 77 72 73 3f ad d3 72 4a 42 59 3e 5f 93|EE.wrs?..rJBY>_.|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   f6 16 73 f2 25 1b a4 ba d9 68 87 a4 0f 7f 51| ..s.%....h....Q|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|7c de 1a 95 b7 97 73 30 96 84 d8 75 30 b1 b5 3c||.....s0...u0..<|
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  93 e4 12 84 db b1 f2 d5 ef e0|      ..........|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|8f fa f1 bf 31 59 05 9e 61 94 c4 af ed 19 84 8b|....1Y..a.......|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 4430 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: true 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b2.7 (2227)
+       |                                               |                |      records[0:8]: 0x0-0x8b2.7 (2227)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000|                                             11|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|1d 7a da 65 c1 f8 ef 74 e6 34 35 32 1e ca e8 60|.z.e...t.452...`|
+  0x002|c4 18 d3 91 dc 0a 3a a1 31 81 22               |......:.1."     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 88      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" (0x88) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+       |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x005|01 b5                                          |..              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+       |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x006|c4                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+       |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+       |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+       |                                               |                |                              value: null 0x70-NA (0)
+       |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+       |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+       |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+       |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+       |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+       |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x009|41                                             |A               |
+       |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+       |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00a|30 5a                                          |0Z              |
+       |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00b|5a                                             |Z               |
+       |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+       |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+       |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+       |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00d|53 41                                          |SA              |
+       |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+       |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+       |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+       |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+       |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+       |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+       |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+       |                                               |                |                                  value: null 0xe4-NA (0)
+       |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *    |until 0x173.7 (140)                            |                |
+       |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+       |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+       |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+       |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+       |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+       |                                               |                |                          value: null 0x183-NA (0)
+       |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *    |until 0x206.7 (128)                            |                |
+       |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+       |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *    |until 0x31a.7 (267)                            |                |
+       |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+       |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+       |                                               |                |            data: raw bits 0x324-NA (0)
+       |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+       |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x033|2c                                             |,               |
+  0x033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x034|a1 7e 31 ec c3 b5 38 88 f1 85 c6 ad 1d c9 0d 88|.~1...8.........|
+  *    |until 0x3d2.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x03d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x03d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x03d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+       |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x03d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+       |                                               |                |        [6]{}: record 0x3d9-0x41d.7 (69)
+  0x03d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x03d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x03d|                                    00 40      |            .@  |          length: 64 0x3dc-0x3dd.7 (2)
+  0x03d|                                          18 c6|              ..|          encrypted_data: raw bits 0x3de-0x41d.7 (64)
+  0x03e|b0 fe 4e d6 15 b8 a3 bd 8b 9d 7c 0e 11 81 c1 68|..N.......|....h|
+  *    |until 0x41d.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x41e-0x8b2.7 (1173)
+  0x041|                                          17   |              . |          type: "application_data" (23) (valid) 0x41e-0x41e.7 (1)
+  0x041|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x41f-0x420.7 (2)
+  0x042|03                                             |.               |
+  0x042|   04 90                                       | ..             |          length: 1168 0x421-0x422.7 (2)
+  0x042|         14 4d ec 4e cc ea 5f b4 6e 31 6b 83 1c|   .M.N.._.n1k..|          encrypted_data: raw bits 0x423-0x8b2.7 (1168)
+  0x043|dc f7 5e c9 db 19 67 b7 fa e5 34 26 a6 3c 1e 5c|..^...g...4&.<.\|
+  *    |until 0x8b2.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_DES_CBC_SHA.pcap.fqtest

@@ -0,0 +1,470 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_DES_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe11-NA (0)
+          |                                               |                |  client{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 39029 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: false 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x15d.7 (350)
+          |                                               |                |      records[0:6]: 0x0-0x15d.7 (350)
+          |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             ad|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|0b ec 20 a9 c9 6a 45 ba 08 59 37 e3 81 55 dc 14|.. ..jE..Y7..U..|
+  0x000002|cf 43 71 5c eb 5c 5c 9a 5f 9f 02               |.Cq\.\\._..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          00 15|              ..|              [0]: "TLS_DHE_RSA_WITH_DES_CBC_SHA" (0x15) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+          |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x000003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x000003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+          |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x000003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x000003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x000003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x000004|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x000004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x000004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x000004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x000004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x000004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x000004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x000004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x000004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x000004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x000004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x000004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x000004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x000004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x000004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x000004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x000005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x000005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x000005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x000005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x000005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x000005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x000005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x000005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x000005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x000005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x000005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x000005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x000005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x000005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x000005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x000005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x000006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+          |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x000006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x000006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x000006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+          |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x000006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x000006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x000006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+          |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x000006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x000006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+          |                                               |                |            public{}: 0x6f-NA (0)
+  0x000006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x000007|40                                             |@               |
+  0x000007|   d6 07 6e cb 9e c3 08 3f 7f 5a 35 a4 63 88 3f| ..n....?.Z5.c.?|              data: raw bits 0x71-0xb0.7 (64)
+  0x000008|ba 51 d4 4f 8d c0 db 59 6d d5 05 d3 32 e6 24 3f|.Q.O...Ym...2.$?|
+  *       |until 0xb0.7 (64)                              |                |
+          |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00000b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00000b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00000b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+          |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00000b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+          |                                               |                |        [3]{}: record 0xb7-0xf3.7 (61)
+  0x00000b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00000b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00000b|                              00 38            |          .8    |          length: 56 0xba-0xbb.7 (2)
+  0x00000b|                                    5d 50 95 3a|            ]P.:|          encrypted_data: raw bits 0xbc-0xf3.7 (56)
+  0x00000c|35 96 df 21 f1 b9 eb ff fd d2 e5 74 a6 4d 72 65|5..!.......t.Mre|
+  *       |until 0xf3.7 (56)                              |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ef 69 39 2c 73 51 23 2e 92 5e 87 fc|    .i9,sQ#..^..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0xf4-0x130.7 (61)
+  0x00000f|            17                                 |    .           |          type: "application_data" (23) (valid) 0xf4-0xf4.7 (1)
+  0x00000f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0xf5-0xf6.7 (2)
+  0x00000f|                     00 38                     |       .8       |          length: 56 0xf7-0xf8.7 (2)
+  0x00000f|                           40 27 63 d9 2d 6f b1|         @'c.-o.|          encrypted_data: raw bits 0xf9-0x130.7 (56)
+  0x000010|26 98 49 fe ec 78 47 61 ae e3 d0 8b 90 99 32 26|&.I..xGa......2&|
+  *       |until 0x130.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x131-0x15d.7 (45)
+  0x000013|   15                                          | .              |          type: "alert" (21) (valid) 0x131-0x131.7 (1)
+  0x000013|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x132-0x133.7 (2)
+  0x000013|            00 28                              |    .(          |          length: 40 0x134-0x135.7 (2)
+  0x000013|                  05 fc 61 56 db cb 01 00 fc fa|      ..aV......|          encrypted_data: raw bits 0x136-0x15d.7 (40)
+  0x000014|a7 4a 3f 76 c5 02 a9 31 be c8 c0 90 06 05 c6 81|.J?v...1........|
+  0x000015|be a0 9d 5a 9e be 35 84 5f ce 54 46 8d 86|     |...Z..5._.TF..| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe11-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe11-NA (0)
+          |                                               |                |    port: 4430 0xe11-NA (0)
+          |                                               |                |    has_start: true 0xe11-NA (0)
+          |                                               |                |    has_end: true 0xe11-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe11-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x89a.7 (2203)
+          |                                               |                |      records[0:8]: 0x0-0x89a.7 (2203)
+          |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             43|               C|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|bb fc c9 05 cc 74 9b 71 67 44 db 0d a3 d2 0c e7|.....t.qgD......|
+  0x000002|3e 6d 36 22 07 53 04 1d 40 40 cd               |>m6".S..@@.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 15      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_DES_CBC_SHA" (0x15) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x000003|0e                                             |.               |
+          |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x000003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x000003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+          |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x000003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x000003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x000003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+          |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x000003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x000004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x000004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+          |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x000004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x000004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x000004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+          |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+          |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x000004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x000004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x000004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x000004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x000004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x000005|01 b5                                          |..              |
+          |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+          |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x000005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x000005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x000005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x000005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+          |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x000005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x000005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x000005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x000005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x000006|c4                                             |.               |
+          |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x000006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x000006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x000006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x000006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+          |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x000006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x000006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x000006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x000006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+          |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x000006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x000006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x000006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x000006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x000006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x000006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+          |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x000006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x000006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x000006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x000006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+          |                                               |                |                              value: null 0x70-NA (0)
+          |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x000007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x000007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x000007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x000007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+          |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x000007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x000007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x000007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x000007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+          |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x000007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x000007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x000007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x000007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+          |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x000007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x000007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+          |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x000007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x000007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x000007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x000007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x000007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x000007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x000007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x000007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x000007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x000008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x000009|41                                             |A               |
+          |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x000009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x000009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x000009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x000009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+          |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x000009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x000009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x000009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x000009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x000009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00000a|30 5a                                          |0Z              |
+          |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00000a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00000a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00000a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00000a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00000a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00000b|5a                                             |Z               |
+          |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00000b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00000b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00000b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00000b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+          |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00000b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00000b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00000b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00000b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+          |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00000b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00000b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00000b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00000b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+          |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00000b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00000b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00000b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00000b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+          |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00000b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00000b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00000b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00000b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+          |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00000b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00000b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00000c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00000d|53 41                                          |SA              |
+          |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00000d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00000d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00000d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00000d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+          |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00000d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00000d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00000d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00000d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+          |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00000d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00000d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00000d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00000d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+          |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00000d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00000d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00000d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00000d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00000d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00000e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+          |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00000e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00000e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00000e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00000e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+          |                                               |                |                                  value: null 0xe4-NA (0)
+          |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00000e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00000e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00000e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00000e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00000e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00000e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00000f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *       |until 0x173.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x000017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x000017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x000017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x000017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+          |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x000017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x000017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x000017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x000017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+          |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x000017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x000017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x000017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x000017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x000017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x000017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x000018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+          |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x000018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x000018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x000018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x000018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+          |                                               |                |                          value: null 0x183-NA (0)
+          |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x000018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x000018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x000018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x000018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x000018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x000018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x000019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *       |until 0x206.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x000020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x000020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x000020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+          |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x000020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x000020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x000021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *       |until 0x31a.7 (267)                            |                |
+          |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x000031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x000031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x000031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+          |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x000032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x000032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+          |                                               |                |            data: raw bits 0x324-NA (0)
+          |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x000032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x000032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x000032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+          |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x000032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x000032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x000032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x000033|2c                                             |,               |
+  0x000033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x000033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x000034|a1 7e 31 5f 7d 11 f8 98 f9 29 88 97 4a 66 cf 9b|.~1_}....)..Jf..|
+  *       |until 0x3d2.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x00003d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x00003d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x00003d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+          |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x00003d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+          |                                               |                |        [6]{}: record 0x3d9-0x415.7 (61)
+  0x00003d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x00003d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x00003d|                                    00 38      |            .8  |          length: 56 0x3dc-0x3dd.7 (2)
+  0x00003d|                                          82 9a|              ..|          encrypted_data: raw bits 0x3de-0x415.7 (56)
+  0x00003e|70 64 60 a1 06 6f 0a e3 7f 1a f8 58 9e 23 65 46|pd`..o.....X.#eF|
+  *       |until 0x415.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            49 76 51 fd 5a a8 fb 04 3a d2 f6 bc|    IvQ.Z...:...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x416-0x89a.7 (1157)
+  0x000041|                  17                           |      .         |          type: "application_data" (23) (valid) 0x416-0x416.7 (1)
+  0x000041|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x417-0x418.7 (2)
+  0x000041|                           04 80               |         ..     |          length: 1152 0x419-0x41a.7 (2)
+  0x000041|                                 c8 84 c6 62 9f|           ...b.|          encrypted_data: raw bits 0x41b-0x89a.7 (1152)
+  0x000042|b2 1e 18 2e 35 9e ee 10 96 0e 0c 61 4f a6 ad 8d|....5......aO...|
+  *       |until 0x89a.7 (end) (1152)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1132.7 (4403)
+    *     |until 0x1132.7 (end) (4403)                    |                |

format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_SEED_CBC_SHA.pcap.fqtest

@@ -0,0 +1,449 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_SEED_CBC_SHA.pcap
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe41-NA (0)
+       |                                               |                |  client{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 39007 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: false 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x175.7 (374)
+       |                                               |                |      records[0:6]: 0x0-0x175.7 (374)
+       |                                               |                |        [0]{}: record 0x0-0x65.7 (102)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000|         00 61                                 |   .a           |          length: 97 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x65.7 (97)
+  0x000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000|                  00 00 5d                     |      ..]       |            length: 93 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             ce|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|b2 ac 82 f5 93 0b a9 0f 11 40 de b1 54 5c cf 4e|.........@..T\.N|
+  0x002|5c 49 34 da b4 db 45 74 78 c9 05               |\I4...Etx..     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+       |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x002|                                          00 9a|              ..|              [0]: "TLS_DHE_RSA_WITH_SEED_CBC_SHA" (0x9a) cipher_suit 0x2e-0x2f.7 (2)
+  0x003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+       |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x003|               00 2f                           |     ./         |            extensions_length: 47 0x35-0x36.7 (2)
+       |                                               |                |            extensions[0:3]: 0x37-0x65.7 (47)
+       |                                               |                |              [0]{}: extension 0x37-0x3a.7 (4)
+  0x003|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x37-0x38.7 (2)
+  0x003|                           00 00               |         ..     |                length: 0 0x39-0x3a.7 (2)
+       |                                               |                |              [1]{}: extension 0x3b-0x60.7 (38)
+  0x003|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x3b-0x3c.7 (2)
+  0x003|                                       00 22   |             ." |                length: 34 0x3d-0x3e.7 (2)
+  0x003|                                             00|               .|                signature_algorithm_length: 32 0x3f-0x40.7 (2)
+  0x004|20                                             |                |
+       |                                               |                |                signature_algorithms[0:16]: 0x41-0x60.7 (32)
+       |                                               |                |                  [0]{}: signature_algorithm 0x41-0x42.7 (2)
+  0x004|   06                                          | .              |                    hash: "sha512" (6) 0x41-0x41.7 (1)
+  0x004|      01                                       |  .             |                    signature: "rsa" (1) 0x42-0x42.7 (1)
+       |                                               |                |                  [1]{}: signature_algorithm 0x43-0x44.7 (2)
+  0x004|         06                                    |   .            |                    hash: "sha512" (6) 0x43-0x43.7 (1)
+  0x004|            02                                 |    .           |                    signature: "dsa" (2) 0x44-0x44.7 (1)
+       |                                               |                |                  [2]{}: signature_algorithm 0x45-0x46.7 (2)
+  0x004|               06                              |     .          |                    hash: "sha512" (6) 0x45-0x45.7 (1)
+  0x004|                  03                           |      .         |                    signature: "ecdsa" (3) 0x46-0x46.7 (1)
+       |                                               |                |                  [3]{}: signature_algorithm 0x47-0x48.7 (2)
+  0x004|                     05                        |       .        |                    hash: "sha384" (5) 0x47-0x47.7 (1)
+  0x004|                        01                     |        .       |                    signature: "rsa" (1) 0x48-0x48.7 (1)
+       |                                               |                |                  [4]{}: signature_algorithm 0x49-0x4a.7 (2)
+  0x004|                           05                  |         .      |                    hash: "sha384" (5) 0x49-0x49.7 (1)
+  0x004|                              02               |          .     |                    signature: "dsa" (2) 0x4a-0x4a.7 (1)
+       |                                               |                |                  [5]{}: signature_algorithm 0x4b-0x4c.7 (2)
+  0x004|                                 05            |           .    |                    hash: "sha384" (5) 0x4b-0x4b.7 (1)
+  0x004|                                    03         |            .   |                    signature: "ecdsa" (3) 0x4c-0x4c.7 (1)
+       |                                               |                |                  [6]{}: signature_algorithm 0x4d-0x4e.7 (2)
+  0x004|                                       04      |             .  |                    hash: "sha256" (4) 0x4d-0x4d.7 (1)
+  0x004|                                          01   |              . |                    signature: "rsa" (1) 0x4e-0x4e.7 (1)
+       |                                               |                |                  [7]{}: signature_algorithm 0x4f-0x50.7 (2)
+  0x004|                                             04|               .|                    hash: "sha256" (4) 0x4f-0x4f.7 (1)
+  0x005|02                                             |.               |                    signature: "dsa" (2) 0x50-0x50.7 (1)
+       |                                               |                |                  [8]{}: signature_algorithm 0x51-0x52.7 (2)
+  0x005|   04                                          | .              |                    hash: "sha256" (4) 0x51-0x51.7 (1)
+  0x005|      03                                       |  .             |                    signature: "ecdsa" (3) 0x52-0x52.7 (1)
+       |                                               |                |                  [9]{}: signature_algorithm 0x53-0x54.7 (2)
+  0x005|         03                                    |   .            |                    hash: "sha224" (3) 0x53-0x53.7 (1)
+  0x005|            01                                 |    .           |                    signature: "rsa" (1) 0x54-0x54.7 (1)
+       |                                               |                |                  [10]{}: signature_algorithm 0x55-0x56.7 (2)
+  0x005|               03                              |     .          |                    hash: "sha224" (3) 0x55-0x55.7 (1)
+  0x005|                  02                           |      .         |                    signature: "dsa" (2) 0x56-0x56.7 (1)
+       |                                               |                |                  [11]{}: signature_algorithm 0x57-0x58.7 (2)
+  0x005|                     03                        |       .        |                    hash: "sha224" (3) 0x57-0x57.7 (1)
+  0x005|                        03                     |        .       |                    signature: "ecdsa" (3) 0x58-0x58.7 (1)
+       |                                               |                |                  [12]{}: signature_algorithm 0x59-0x5a.7 (2)
+  0x005|                           02                  |         .      |                    hash: "sha1" (2) 0x59-0x59.7 (1)
+  0x005|                              01               |          .     |                    signature: "rsa" (1) 0x5a-0x5a.7 (1)
+       |                                               |                |                  [13]{}: signature_algorithm 0x5b-0x5c.7 (2)
+  0x005|                                 02            |           .    |                    hash: "sha1" (2) 0x5b-0x5b.7 (1)
+  0x005|                                    02         |            .   |                    signature: "dsa" (2) 0x5c-0x5c.7 (1)
+       |                                               |                |                  [14]{}: signature_algorithm 0x5d-0x5e.7 (2)
+  0x005|                                       02      |             .  |                    hash: "sha1" (2) 0x5d-0x5d.7 (1)
+  0x005|                                          03   |              . |                    signature: "ecdsa" (3) 0x5e-0x5e.7 (1)
+       |                                               |                |                  [15]{}: signature_algorithm 0x5f-0x60.7 (2)
+  0x005|                                             01|               .|                    hash: "md5" (1) 0x5f-0x5f.7 (1)
+  0x006|01                                             |.               |                    signature: "rsa" (1) 0x60-0x60.7 (1)
+       |                                               |                |              [2]{}: extension 0x61-0x65.7 (5)
+  0x006|   00 0f                                       | ..             |                type: "heartbeat" (15) 0x61-0x62.7 (2)
+  0x006|         00 01                                 |   ..           |                length: 1 0x63-0x64.7 (2)
+  0x006|               01                              |     .          |                data: raw bits 0x65-0x65.7 (1)
+       |                                               |                |        [1]{}: record 0x66-0xb0.7 (75)
+  0x006|                  16                           |      .         |          type: "handshake" (22) (valid) 0x66-0x66.7 (1)
+  0x006|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0x67-0x68.7 (2)
+  0x006|                           00 46               |         .F     |          length: 70 0x69-0x6a.7 (2)
+       |                                               |                |          message{}: 0x6b-0xb0.7 (70)
+  0x006|                                 10            |           .    |            type: "client_key_exchange" (16) 0x6b-0x6b.7 (1)
+  0x006|                                    00 00 42   |            ..B |            length: 66 0x6c-0x6e.7 (3)
+       |                                               |                |            public{}: 0x6f-NA (0)
+  0x006|                                             00|               .|              length: 64 0x6f-0x70.7 (2)
+  0x007|40                                             |@               |
+  0x007|   b9 2b 74 e9 e1 44 70 e9 ee 8a c6 03 9c 4d dc| .+t..Dp......M.|              data: raw bits 0x71-0xb0.7 (64)
+  0x008|14 75 d6 33 b1 fa 49 4f 4e c4 e6 29 45 a1 05 93|.u.3..ION..)E...|
+  *    |until 0xb0.7 (64)                              |                |
+       |                                               |                |        [2]{}: record 0xb1-0xb6.7 (6)
+  0x00b|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xb1-0xb1.7 (1)
+  0x00b|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xb2-0xb3.7 (2)
+  0x00b|            00 01                              |    ..          |          length: 1 0xb4-0xb5.7 (2)
+       |                                               |                |          message{}: 0xb6-0xb6.7 (1)
+  0x00b|                  01                           |      .         |            type: 1 0xb6-0xb6.7 (1)
+       |                                               |                |        [3]{}: record 0xb7-0xfb.7 (69)
+  0x00b|                     16                        |       .        |          type: "handshake" (22) (valid) 0xb7-0xb7.7 (1)
+  0x00b|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xb8-0xb9.7 (2)
+  0x00b|                              00 40            |          .@    |          length: 64 0xba-0xbb.7 (2)
+  0x00b|                                    97 88 ab ad|            ....|          encrypted_data: raw bits 0xbc-0xfb.7 (64)
+  0x00c|e1 6e 0f 87 9b c5 0a 54 3e 2e 02 00 e2 7b 66 71|.n.....T>....{fq|
+  *    |until 0xfb.7 (64)                              |                |
+       |                                               |                |        [4]{}: record 0xfc-0x140.7 (69)
+  0x00f|                                    17         |            .   |          type: "application_data" (23) (valid) 0xfc-0xfc.7 (1)
+  0x00f|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0xfd-0xfe.7 (2)
+  0x00f|                                             00|               .|          length: 64 0xff-0x100.7 (2)
+  0x010|40                                             |@               |
+  0x010|   8c d3 b1 4c bf e2 d2 df 63 b8 07 a7 ce ad b4| ...L....c......|          encrypted_data: raw bits 0x101-0x140.7 (64)
+  0x011|46 50 41 2a 7e f2 13 53 c7 3e 1e 72 e3 67 e2 20|FPA*~..S.>.r.g. |
+  *    |until 0x140.7 (64)                             |                |
+       |                                               |                |        [5]{}: record 0x141-0x175.7 (53)
+  0x014|   15                                          | .              |          type: "alert" (21) (valid) 0x141-0x141.7 (1)
+  0x014|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x142-0x143.7 (2)
+  0x014|            00 30                              |    .0          |          length: 48 0x144-0x145.7 (2)
+  0x014|                  fe 10 cf 24 e4 24 ec a4 2f 5d|      ...$.$../]|          encrypted_data: raw bits 0x146-0x175.7 (48)
+  0x015|27 cb dd 9e 86 db c6 df 8c 12 77 a3 b4 75 4b 2d|'.........w..uK-|
+  *    |until 0x175.7 (end) (48)                       |                |
+       |                                               |                |  server{}: 0xe41-NA (0)
+       |                                               |                |    ip: "127.0.0.1" 0xe41-NA (0)
+       |                                               |                |    port: 4430 0xe41-NA (0)
+       |                                               |                |    has_start: true 0xe41-NA (0)
+       |                                               |                |    has_end: true 0xe41-NA (0)
+       |                                               |                |    skipped_bytes: 0 0xe41-NA (0)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b2.7 (2227)
+       |                                               |                |      records[0:8]: 0x0-0x8b2.7 (2227)
+       |                                               |                |        [0]{}: record 0x0-0x3e.7 (63)
+  0x000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000|         00 3a                                 |   .:           |          length: 58 0x3-0x4.7 (2)
+       |                                               |                |          message{}: 0x5-0x3e.7 (58)
+  0x000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000|                  00 00 36                     |      ..6       |            length: 54 0x6-0x8.7 (3)
+  0x000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+       |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000|                                             b0|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x001|f1 38 fa 28 bc 29 90 3e 6d 65 de 70 24 56 23 c5|.8.(.).>me.p$V#.|
+  0x002|d2 82 06 3a da f6 60 6c d1 86 8f               |...:..`l...     |
+  0x002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+       |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x002|                                    00 9a      |            ..  |            cipher_suit: "TLS_DHE_RSA_WITH_SEED_CBC_SHA" (0x9a) 0x2c-0x2d.7 (2)
+  0x002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x002|                                             00|               .|            extensions_length: 14 0x2f-0x30.7 (2)
+  0x003|0e                                             |.               |
+       |                                               |                |            extensions[0:3]: 0x31-0x3e.7 (14)
+       |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+       |                                               |                |              [1]{}: extension 0x36-0x39.7 (4)
+  0x003|                  00 23                        |      .#        |                type: "session_ticket" (35) 0x36-0x37.7 (2)
+  0x003|                        00 00                  |        ..      |                length: 0 0x38-0x39.7 (2)
+       |                                               |                |              [2]{}: extension 0x3a-0x3e.7 (5)
+  0x003|                              00 0f            |          ..    |                type: "heartbeat" (15) 0x3a-0x3b.7 (2)
+  0x003|                                    00 01      |            ..  |                length: 1 0x3c-0x3d.7 (2)
+  0x003|                                          01   |              . |                data: raw bits 0x3e-0x3e.7 (1)
+       |                                               |                |        [1]{}: record 0x3f-0x206.7 (456)
+  0x003|                                             16|               .|          type: "handshake" (22) (valid) 0x3f-0x3f.7 (1)
+  0x004|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x40-0x41.7 (2)
+  0x004|      01 c3                                    |  ..            |          length: 451 0x42-0x43.7 (2)
+       |                                               |                |          message{}: 0x44-0x206.7 (451)
+  0x004|            0b                                 |    .           |            type: "certificate" (11) 0x44-0x44.7 (1)
+  0x004|               00 01 bf                        |     ...        |            length: 447 0x45-0x47.7 (3)
+  0x004|                        00 01 bc               |        ...     |            certificates_length: 444 0x48-0x4a.7 (3)
+       |                                               |                |            certificates[0:1]: 0x4b-0x206.7 (444)
+       |                                               |                |              [0]{}: certificate 0x4b-0x206.7 (444)
+  0x004|                                 00 01 b9      |           ...  |                length: 441 0x4b-0x4d.7 (3)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x4e-0x206.7 (441)
+  0x004|                                          30   |              0 |                  class: "universal" (0) 0x4e-0x4e.1 (0.2)
+  0x004|                                          30   |              0 |                  form: "constructed" (1) 0x4e.2-0x4e.2 (0.1)
+  0x004|                                          30   |              0 |                  tag: "sequence" (0x10) 0x4e.3-0x4e.7 (0.5)
+  0x004|                                             82|               .|                  length: 437 0x4f-0x51.7 (3)
+  0x005|01 b5                                          |..              |
+       |                                               |                |                  constructed[0:3]: 0x52-0x206.7 (437)
+       |                                               |                |                    [0]{}: object 0x52-0x173.7 (290)
+  0x005|      30                                       |  0             |                      class: "universal" (0) 0x52-0x52.1 (0.2)
+  0x005|      30                                       |  0             |                      form: "constructed" (1) 0x52.2-0x52.2 (0.1)
+  0x005|      30                                       |  0             |                      tag: "sequence" (0x10) 0x52.3-0x52.7 (0.5)
+  0x005|         82 01 1e                              |   ...          |                      length: 286 0x53-0x55.7 (3)
+       |                                               |                |                      constructed[0:6]: 0x56-0x173.7 (286)
+       |                                               |                |                        [0]{}: object 0x56-0x60.7 (11)
+  0x005|                  02                           |      .         |                          class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x005|                  02                           |      .         |                          form: "primitive" (0) 0x56.2-0x56.2 (0.1)
+  0x005|                  02                           |      .         |                          tag: "integer" (0x2) 0x56.3-0x56.7 (0.5)
+  0x005|                     09                        |       .        |                          length: 9 0x57-0x57.7 (1)
+  0x005|                        00 f4 a7 2f d3 e8 fc 37|        .../...7|                          value: 17629111853558544324 0x58-0x60.7 (9)
+  0x006|c4                                             |.               |
+       |                                               |                |                        [1]{}: object 0x61-0x6f.7 (15)
+  0x006|   30                                          | 0              |                          class: "universal" (0) 0x61-0x61.1 (0.2)
+  0x006|   30                                          | 0              |                          form: "constructed" (1) 0x61.2-0x61.2 (0.1)
+  0x006|   30                                          | 0              |                          tag: "sequence" (0x10) 0x61.3-0x61.7 (0.5)
+  0x006|      0d                                       |  .             |                          length: 13 0x62-0x62.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x63-0x6f.7 (13)
+       |                                               |                |                            [0]{}: object 0x63-0x6d.7 (11)
+  0x006|         06                                    |   .            |                              class: "universal" (0) 0x63-0x63.1 (0.2)
+  0x006|         06                                    |   .            |                              form: "primitive" (0) 0x63.2-0x63.2 (0.1)
+  0x006|         06                                    |   .            |                              tag: "object_identifier" (0x6) 0x63.3-0x63.7 (0.5)
+  0x006|            09                                 |    .           |                              length: 9 0x64-0x64.7 (1)
+       |                                               |                |                              value[0:7]: 0x65-0x6d.7 (9)
+  0x006|               2a                              |     *          |                                [0]: 1 oid 0x65-0x65.7 (1)
+  0x006|               2a                              |     *          |                                [1]: 2 oid 0x65-0x65.7 (1)
+  0x006|                  86 48                        |      .H        |                                [2]: 840 oid 0x66-0x67.7 (2)
+  0x006|                        86 f7 0d               |        ...     |                                [3]: 113549 oid 0x68-0x6a.7 (3)
+  0x006|                                 01            |           .    |                                [4]: 1 oid 0x6b-0x6b.7 (1)
+  0x006|                                    01         |            .   |                                [5]: 1 oid 0x6c-0x6c.7 (1)
+  0x006|                                       05      |             .  |                                [6]: 5 oid 0x6d-0x6d.7 (1)
+       |                                               |                |                            [1]{}: object 0x6e-0x6f.7 (2)
+  0x006|                                          05   |              . |                              class: "universal" (0) 0x6e-0x6e.1 (0.2)
+  0x006|                                          05   |              . |                              form: "primitive" (0) 0x6e.2-0x6e.2 (0.1)
+  0x006|                                          05   |              . |                              tag: "null" (0x5) 0x6e.3-0x6e.7 (0.5)
+  0x006|                                             00|               .|                              length: "indefinite" (0) 0x6f-0x6f.7 (1)
+       |                                               |                |                              value: null 0x70-NA (0)
+       |                                               |                |                        [2]{}: object 0x70-0x90.7 (33)
+  0x007|30                                             |0               |                          class: "universal" (0) 0x70-0x70.1 (0.2)
+  0x007|30                                             |0               |                          form: "constructed" (1) 0x70.2-0x70.2 (0.1)
+  0x007|30                                             |0               |                          tag: "sequence" (0x10) 0x70.3-0x70.7 (0.5)
+  0x007|   1f                                          | .              |                          length: 31 0x71-0x71.7 (1)
+       |                                               |                |                          constructed[0:1]: 0x72-0x90.7 (31)
+       |                                               |                |                            [0]{}: object 0x72-0x90.7 (31)
+  0x007|      31                                       |  1             |                              class: "universal" (0) 0x72-0x72.1 (0.2)
+  0x007|      31                                       |  1             |                              form: "constructed" (1) 0x72.2-0x72.2 (0.1)
+  0x007|      31                                       |  1             |                              tag: "set" (0x11) 0x72.3-0x72.7 (0.5)
+  0x007|         1d                                    |   .            |                              length: 29 0x73-0x73.7 (1)
+       |                                               |                |                              constructed[0:1]: 0x74-0x90.7 (29)
+       |                                               |                |                                [0]{}: object 0x74-0x90.7 (29)
+  0x007|            30                                 |    0           |                                  class: "universal" (0) 0x74-0x74.1 (0.2)
+  0x007|            30                                 |    0           |                                  form: "constructed" (1) 0x74.2-0x74.2 (0.1)
+  0x007|            30                                 |    0           |                                  tag: "sequence" (0x10) 0x74.3-0x74.7 (0.5)
+  0x007|               1b                              |     .          |                                  length: 27 0x75-0x75.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0x76-0x90.7 (27)
+       |                                               |                |                                    [0]{}: object 0x76-0x7a.7 (5)
+  0x007|                  06                           |      .         |                                      class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x007|                  06                           |      .         |                                      form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x007|                  06                           |      .         |                                      tag: "object_identifier" (0x6) 0x76.3-0x76.7 (0.5)
+  0x007|                     03                        |       .        |                                      length: 3 0x77-0x77.7 (1)
+       |                                               |                |                                      value[0:4]: 0x78-0x7a.7 (3)
+  0x007|                        55                     |        U       |                                        [0]: 2 oid 0x78-0x78.7 (1)
+  0x007|                        55                     |        U       |                                        [1]: 5 oid 0x78-0x78.7 (1)
+  0x007|                           04                  |         .      |                                        [2]: 4 oid 0x79-0x79.7 (1)
+  0x007|                              03               |          .     |                                        [3]: 3 oid 0x7a-0x7a.7 (1)
+       |                                               |                |                                    [1]{}: object 0x7b-0x90.7 (22)
+  0x007|                                 0c            |           .    |                                      class: "universal" (0) 0x7b-0x7b.1 (0.2)
+  0x007|                                 0c            |           .    |                                      form: "primitive" (0) 0x7b.2-0x7b.2 (0.1)
+  0x007|                                 0c            |           .    |                                      tag: "utf8_string" (0xc) 0x7b.3-0x7b.7 (0.5)
+  0x007|                                    14         |            .   |                                      length: 20 0x7c-0x7c.7 (1)
+  0x007|                                       54 65 73|             Tes|                                      value: "Test Certificate RSA" 0x7d-0x90.7 (20)
+  0x008|74 20 43 65 72 74 69 66 69 63 61 74 65 20 52 53|t Certificate RS|
+  0x009|41                                             |A               |
+       |                                               |                |                        [3]{}: object 0x91-0xb0.7 (32)
+  0x009|   30                                          | 0              |                          class: "universal" (0) 0x91-0x91.1 (0.2)
+  0x009|   30                                          | 0              |                          form: "constructed" (1) 0x91.2-0x91.2 (0.1)
+  0x009|   30                                          | 0              |                          tag: "sequence" (0x10) 0x91.3-0x91.7 (0.5)
+  0x009|      1e                                       |  .             |                          length: 30 0x92-0x92.7 (1)
+       |                                               |                |                          constructed[0:2]: 0x93-0xb0.7 (30)
+       |                                               |                |                            [0]{}: object 0x93-0xa1.7 (15)
+  0x009|         17                                    |   .            |                              class: "universal" (0) 0x93-0x93.1 (0.2)
+  0x009|         17                                    |   .            |                              form: "primitive" (0) 0x93.2-0x93.2 (0.1)
+  0x009|         17                                    |   .            |                              tag: "utc_time" (0x17) 0x93.3-0x93.7 (0.5)
+  0x009|            0d                                 |    .           |                              length: 13 0x94-0x94.7 (1)
+  0x009|               31 33 30 39 31 35 32 31 35 31 31|     13091521511|                              value: "130915215110Z" 0x95-0xa1.7 (13)
+  0x00a|30 5a                                          |0Z              |
+       |                                               |                |                            [1]{}: object 0xa2-0xb0.7 (15)
+  0x00a|      17                                       |  .             |                              class: "universal" (0) 0xa2-0xa2.1 (0.2)
+  0x00a|      17                                       |  .             |                              form: "primitive" (0) 0xa2.2-0xa2.2 (0.1)
+  0x00a|      17                                       |  .             |                              tag: "utc_time" (0x17) 0xa2.3-0xa2.7 (0.5)
+  0x00a|         0d                                    |   .            |                              length: 13 0xa3-0xa3.7 (1)
+  0x00a|            32 33 30 39 31 33 32 31 35 31 31 30|    230913215110|                              value: "230913215110Z" 0xa4-0xb0.7 (13)
+  0x00b|5a                                             |Z               |
+       |                                               |                |                        [4]{}: object 0xb1-0xd1.7 (33)
+  0x00b|   30                                          | 0              |                          class: "universal" (0) 0xb1-0xb1.1 (0.2)
+  0x00b|   30                                          | 0              |                          form: "constructed" (1) 0xb1.2-0xb1.2 (0.1)
+  0x00b|   30                                          | 0              |                          tag: "sequence" (0x10) 0xb1.3-0xb1.7 (0.5)
+  0x00b|      1f                                       |  .             |                          length: 31 0xb2-0xb2.7 (1)
+       |                                               |                |                          constructed[0:1]: 0xb3-0xd1.7 (31)
+       |                                               |                |                            [0]{}: object 0xb3-0xd1.7 (31)
+  0x00b|         31                                    |   1            |                              class: "universal" (0) 0xb3-0xb3.1 (0.2)
+  0x00b|         31                                    |   1            |                              form: "constructed" (1) 0xb3.2-0xb3.2 (0.1)
+  0x00b|         31                                    |   1            |                              tag: "set" (0x11) 0xb3.3-0xb3.7 (0.5)
+  0x00b|            1d                                 |    .           |                              length: 29 0xb4-0xb4.7 (1)
+       |                                               |                |                              constructed[0:1]: 0xb5-0xd1.7 (29)
+       |                                               |                |                                [0]{}: object 0xb5-0xd1.7 (29)
+  0x00b|               30                              |     0          |                                  class: "universal" (0) 0xb5-0xb5.1 (0.2)
+  0x00b|               30                              |     0          |                                  form: "constructed" (1) 0xb5.2-0xb5.2 (0.1)
+  0x00b|               30                              |     0          |                                  tag: "sequence" (0x10) 0xb5.3-0xb5.7 (0.5)
+  0x00b|                  1b                           |      .         |                                  length: 27 0xb6-0xb6.7 (1)
+       |                                               |                |                                  constructed[0:2]: 0xb7-0xd1.7 (27)
+       |                                               |                |                                    [0]{}: object 0xb7-0xbb.7 (5)
+  0x00b|                     06                        |       .        |                                      class: "universal" (0) 0xb7-0xb7.1 (0.2)
+  0x00b|                     06                        |       .        |                                      form: "primitive" (0) 0xb7.2-0xb7.2 (0.1)
+  0x00b|                     06                        |       .        |                                      tag: "object_identifier" (0x6) 0xb7.3-0xb7.7 (0.5)
+  0x00b|                        03                     |        .       |                                      length: 3 0xb8-0xb8.7 (1)
+       |                                               |                |                                      value[0:4]: 0xb9-0xbb.7 (3)
+  0x00b|                           55                  |         U      |                                        [0]: 2 oid 0xb9-0xb9.7 (1)
+  0x00b|                           55                  |         U      |                                        [1]: 5 oid 0xb9-0xb9.7 (1)
+  0x00b|                              04               |          .     |                                        [2]: 4 oid 0xba-0xba.7 (1)
+  0x00b|                                 03            |           .    |                                        [3]: 3 oid 0xbb-0xbb.7 (1)
+       |                                               |                |                                    [1]{}: object 0xbc-0xd1.7 (22)
+  0x00b|                                    0c         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00b|                                    0c         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00b|                                    0c         |            .   |                                      tag: "utf8_string" (0xc) 0xbc.3-0xbc.7 (0.5)
+  0x00b|                                       14      |             .  |                                      length: 20 0xbd-0xbd.7 (1)
+  0x00b|                                          54 65|              Te|                                      value: "Test Certificate RSA" 0xbe-0xd1.7 (20)
+  0x00c|73 74 20 43 65 72 74 69 66 69 63 61 74 65 20 52|st Certificate R|
+  0x00d|53 41                                          |SA              |
+       |                                               |                |                        [5]{}: object 0xd2-0x173.7 (162)
+  0x00d|      30                                       |  0             |                          class: "universal" (0) 0xd2-0xd2.1 (0.2)
+  0x00d|      30                                       |  0             |                          form: "constructed" (1) 0xd2.2-0xd2.2 (0.1)
+  0x00d|      30                                       |  0             |                          tag: "sequence" (0x10) 0xd2.3-0xd2.7 (0.5)
+  0x00d|         81 9f                                 |   ..           |                          length: 159 0xd3-0xd4.7 (2)
+       |                                               |                |                          constructed[0:2]: 0xd5-0x173.7 (159)
+       |                                               |                |                            [0]{}: object 0xd5-0xe3.7 (15)
+  0x00d|               30                              |     0          |                              class: "universal" (0) 0xd5-0xd5.1 (0.2)
+  0x00d|               30                              |     0          |                              form: "constructed" (1) 0xd5.2-0xd5.2 (0.1)
+  0x00d|               30                              |     0          |                              tag: "sequence" (0x10) 0xd5.3-0xd5.7 (0.5)
+  0x00d|                  0d                           |      .         |                              length: 13 0xd6-0xd6.7 (1)
+       |                                               |                |                              constructed[0:2]: 0xd7-0xe3.7 (13)
+       |                                               |                |                                [0]{}: object 0xd7-0xe1.7 (11)
+  0x00d|                     06                        |       .        |                                  class: "universal" (0) 0xd7-0xd7.1 (0.2)
+  0x00d|                     06                        |       .        |                                  form: "primitive" (0) 0xd7.2-0xd7.2 (0.1)
+  0x00d|                     06                        |       .        |                                  tag: "object_identifier" (0x6) 0xd7.3-0xd7.7 (0.5)
+  0x00d|                        09                     |        .       |                                  length: 9 0xd8-0xd8.7 (1)
+       |                                               |                |                                  value[0:7]: 0xd9-0xe1.7 (9)
+  0x00d|                           2a                  |         *      |                                    [0]: 1 oid 0xd9-0xd9.7 (1)
+  0x00d|                           2a                  |         *      |                                    [1]: 2 oid 0xd9-0xd9.7 (1)
+  0x00d|                              86 48            |          .H    |                                    [2]: 840 oid 0xda-0xdb.7 (2)
+  0x00d|                                    86 f7 0d   |            ... |                                    [3]: 113549 oid 0xdc-0xde.7 (3)
+  0x00d|                                             01|               .|                                    [4]: 1 oid 0xdf-0xdf.7 (1)
+  0x00e|01                                             |.               |                                    [5]: 1 oid 0xe0-0xe0.7 (1)
+  0x00e|   01                                          | .              |                                    [6]: 1 oid 0xe1-0xe1.7 (1)
+       |                                               |                |                                [1]{}: object 0xe2-0xe3.7 (2)
+  0x00e|      05                                       |  .             |                                  class: "universal" (0) 0xe2-0xe2.1 (0.2)
+  0x00e|      05                                       |  .             |                                  form: "primitive" (0) 0xe2.2-0xe2.2 (0.1)
+  0x00e|      05                                       |  .             |                                  tag: "null" (0x5) 0xe2.3-0xe2.7 (0.5)
+  0x00e|         00                                    |   .            |                                  length: "indefinite" (0) 0xe3-0xe3.7 (1)
+       |                                               |                |                                  value: null 0xe4-NA (0)
+       |                                               |                |                            [1]{}: object 0xe4-0x173.7 (144)
+  0x00e|            03                                 |    .           |                              class: "universal" (0) 0xe4-0xe4.1 (0.2)
+  0x00e|            03                                 |    .           |                              form: "primitive" (0) 0xe4.2-0xe4.2 (0.1)
+  0x00e|            03                                 |    .           |                              tag: "bit_string" (0x3) 0xe4.3-0xe4.7 (0.5)
+  0x00e|               81 8d                           |     ..         |                              length: 141 0xe5-0xe6.7 (2)
+  0x00e|                     00                        |       .        |                              unused_bits_count: 0 0xe7-0xe7.7 (1)
+  0x00e|                        30 81 89 02 81 81 00 ac|        0.......|                              value: raw bits 0xe8-0x173.7 (140)
+  0x00f|35 2a 93 7f c5 4f 18 98 b2 9f a0 fb 34 e6 e2 8b|5*...O......4...|
+  *    |until 0x173.7 (140)                            |                |
+       |                                               |                |                    [1]{}: object 0x174-0x182.7 (15)
+  0x017|            30                                 |    0           |                      class: "universal" (0) 0x174-0x174.1 (0.2)
+  0x017|            30                                 |    0           |                      form: "constructed" (1) 0x174.2-0x174.2 (0.1)
+  0x017|            30                                 |    0           |                      tag: "sequence" (0x10) 0x174.3-0x174.7 (0.5)
+  0x017|               0d                              |     .          |                      length: 13 0x175-0x175.7 (1)
+       |                                               |                |                      constructed[0:2]: 0x176-0x182.7 (13)
+       |                                               |                |                        [0]{}: object 0x176-0x180.7 (11)
+  0x017|                  06                           |      .         |                          class: "universal" (0) 0x176-0x176.1 (0.2)
+  0x017|                  06                           |      .         |                          form: "primitive" (0) 0x176.2-0x176.2 (0.1)
+  0x017|                  06                           |      .         |                          tag: "object_identifier" (0x6) 0x176.3-0x176.7 (0.5)
+  0x017|                     09                        |       .        |                          length: 9 0x177-0x177.7 (1)
+       |                                               |                |                          value[0:7]: 0x178-0x180.7 (9)
+  0x017|                        2a                     |        *       |                            [0]: 1 oid 0x178-0x178.7 (1)
+  0x017|                        2a                     |        *       |                            [1]: 2 oid 0x178-0x178.7 (1)
+  0x017|                           86 48               |         .H     |                            [2]: 840 oid 0x179-0x17a.7 (2)
+  0x017|                                 86 f7 0d      |           ...  |                            [3]: 113549 oid 0x17b-0x17d.7 (3)
+  0x017|                                          01   |              . |                            [4]: 1 oid 0x17e-0x17e.7 (1)
+  0x017|                                             01|               .|                            [5]: 1 oid 0x17f-0x17f.7 (1)
+  0x018|05                                             |.               |                            [6]: 5 oid 0x180-0x180.7 (1)
+       |                                               |                |                        [1]{}: object 0x181-0x182.7 (2)
+  0x018|   05                                          | .              |                          class: "universal" (0) 0x181-0x181.1 (0.2)
+  0x018|   05                                          | .              |                          form: "primitive" (0) 0x181.2-0x181.2 (0.1)
+  0x018|   05                                          | .              |                          tag: "null" (0x5) 0x181.3-0x181.7 (0.5)
+  0x018|      00                                       |  .             |                          length: "indefinite" (0) 0x182-0x182.7 (1)
+       |                                               |                |                          value: null 0x183-NA (0)
+       |                                               |                |                    [2]{}: object 0x183-0x206.7 (132)
+  0x018|         03                                    |   .            |                      class: "universal" (0) 0x183-0x183.1 (0.2)
+  0x018|         03                                    |   .            |                      form: "primitive" (0) 0x183.2-0x183.2 (0.1)
+  0x018|         03                                    |   .            |                      tag: "bit_string" (0x3) 0x183.3-0x183.7 (0.5)
+  0x018|            81 81                              |    ..          |                      length: 129 0x184-0x185.7 (2)
+  0x018|                  00                           |      .         |                      unused_bits_count: 0 0x186-0x186.7 (1)
+  0x018|                     67 43 4c a8 a4 3e eb 1b 32|       gCL..>..2|                      value: raw bits 0x187-0x206.7 (128)
+  0x019|28 70 8b db eb fe f1 b3 70 39 95 34 33 26 ef 54|(p......p9.43&.T|
+  *    |until 0x206.7 (128)                            |                |
+       |                                               |                |        [2]{}: record 0x207-0x31a.7 (276)
+  0x020|                     16                        |       .        |          type: "handshake" (22) (valid) 0x207-0x207.7 (1)
+  0x020|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x208-0x209.7 (2)
+  0x020|                              01 0f            |          ..    |          length: 271 0x20a-0x20b.7 (2)
+       |                                               |                |          message{}: 0x20c-0x31a.7 (271)
+  0x020|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x20c-0x20c.7 (1)
+  0x020|                                       00 01 0b|             ...|            length: 267 0x20d-0x20f.7 (3)
+  0x021|00 40 da 58 3c 16 d9 85 22 89 d0 e4 af 75 6f 4c|.@.X<..."....uoL|            data: raw bits 0x210-0x31a.7 (267)
+  *    |until 0x31a.7 (267)                            |                |
+       |                                               |                |        [3]{}: record 0x31b-0x323.7 (9)
+  0x031|                                 16            |           .    |          type: "handshake" (22) (valid) 0x31b-0x31b.7 (1)
+  0x031|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x31c-0x31d.7 (2)
+  0x031|                                          00 04|              ..|          length: 4 0x31e-0x31f.7 (2)
+       |                                               |                |          message{}: 0x320-0x323.7 (4)
+  0x032|0e                                             |.               |            type: "server_hello_done" (14) 0x320-0x320.7 (1)
+  0x032|   00 00 00                                    | ...            |            length: 0 0x321-0x323.7 (3)
+       |                                               |                |            data: raw bits 0x324-NA (0)
+       |                                               |                |        [4]{}: record 0x324-0x3d2.7 (175)
+  0x032|            16                                 |    .           |          type: "handshake" (22) (valid) 0x324-0x324.7 (1)
+  0x032|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x325-0x326.7 (2)
+  0x032|                     00 aa                     |       ..       |          length: 170 0x327-0x328.7 (2)
+       |                                               |                |          message{}: 0x329-0x3d2.7 (170)
+  0x032|                           04                  |         .      |            type: "new_session_ticket" (4) 0x329-0x329.7 (1)
+  0x032|                              00 00 a6         |          ...   |            length: 166 0x32a-0x32c.7 (3)
+  0x032|                                       00 00 01|             ...|            lifetime_hint: 300 0x32d-0x330.7 (4)
+  0x033|2c                                             |,               |
+  0x033|   00 a0                                       | ..             |            ticket_length: 160 0x331-0x332.7 (2)
+  0x033|         c0 b4 67 52 a5 ca da 99 7a 28 d7 eb e7|   ..gR....z(...|            ticket: raw bits 0x333-0x3d2.7 (160)
+  0x034|a1 7e 31 ae 35 a0 d5 67 d1 9b b6 7a 6c bf a0 ad|.~1.5..g...zl...|
+  *    |until 0x3d2.7 (160)                            |                |
+       |                                               |                |        [5]{}: record 0x3d3-0x3d8.7 (6)
+  0x03d|         14                                    |   .            |          type: "change_cipher_spec" (20) (valid) 0x3d3-0x3d3.7 (1)
+  0x03d|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3d4-0x3d5.7 (2)
+  0x03d|                  00 01                        |      ..        |          length: 1 0x3d6-0x3d7.7 (2)
+       |                                               |                |          message{}: 0x3d8-0x3d8.7 (1)
+  0x03d|                        01                     |        .       |            type: 1 0x3d8-0x3d8.7 (1)
+       |                                               |                |        [6]{}: record 0x3d9-0x41d.7 (69)
+  0x03d|                           16                  |         .      |          type: "handshake" (22) (valid) 0x3d9-0x3d9.7 (1)
+  0x03d|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x3da-0x3db.7 (2)
+  0x03d|                                    00 40      |            .@  |          length: 64 0x3dc-0x3dd.7 (2)
+  0x03d|                                          2f d7|              /.|          encrypted_data: raw bits 0x3de-0x41d.7 (64)
+  0x03e|e9 c8 69 b1 4e 7f d7 c9 25 fc 19 cd 63 54 a5 13|..i.N...%...cT..|
+  *    |until 0x41d.7 (64)                             |                |
+       |                                               |                |        [7]{}: record 0x41e-0x8b2.7 (1173)
+  0x041|                                          17   |              . |          type: "application_data" (23) (valid) 0x41e-0x41e.7 (1)
+  0x041|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x41f-0x420.7 (2)
+  0x042|03                                             |.               |
+  0x042|   04 90                                       | ..             |          length: 1168 0x421-0x422.7 (2)
+  0x042|         69 68 06 53 b4 f2 44 4a 5f 6b 36 46 dd|   ih.S..DJ_k6F.|          encrypted_data: raw bits 0x423-0x8b2.7 (1168)
+  0x043|d2 54 78 b5 8b 60 95 f9 42 d1 f2 ef 0e 48 97 79|.Tx..`..B....H.y|
+  *    |until 0x8b2.7 (end) (1168)                     |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest

@@ -0,0 +1,518 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xdbe-NA (0)
+          |                                               |                |  client{}: 0xdbe-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdbe-NA (0)
+          |                                               |                |    port: 42400 0xdbe-NA (0)
+          |                                               |                |    has_start: true 0xdbe-NA (0)
+          |                                               |                |    has_end: false 0xdbe-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdbe-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x19d.7 (414)
+          |                                               |                |      records[0:6]: 0x0-0x19d.7 (414)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             a3|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|c6 41 9f 37 17 02 3e 55 ae 15 50 f8 7a f6 f4 71|.A.7..>U..P.z..q|
+  0x000002|3a 9b 1a be 19 ff 48 02 bd 2b f0               |:.....H..+.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 08|              ..|              [0]: "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA" (0xc008) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 2f a6 2a 1b f3 80 0e e2 a0 a4 ba e1 6d 65 ee|./.*.........me.|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x133.7 (61)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 38            |          .8    |          length: 56 0xfa-0xfb.7 (2)
+  0x00000f|                                    23 dc b5 e5|            #...|          encrypted_data: raw bits 0xfc-0x133.7 (56)
+  0x000010|49 b2 a5 8e 00 b0 7e b8 e1 b3 c1 0a 84 75 85 6e|I.....~......u.n|
+  *       |until 0x133.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            0d bd b1 a9 5b 8b 49 a6 f6 fc 36 24|    ....[.I...6$|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x134-0x170.7 (61)
+  0x000013|            17                                 |    .           |          type: "application_data" (23) (valid) 0x134-0x134.7 (1)
+  0x000013|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x135-0x136.7 (2)
+  0x000013|                     00 38                     |       .8       |          length: 56 0x137-0x138.7 (2)
+  0x000013|                           f2 5c 3a 43 60 57 ac|         .\:C`W.|          encrypted_data: raw bits 0x139-0x170.7 (56)
+  0x000014|ab 39 38 e4 6d bb 09 9f 0b c9 fb 54 76 f8 d1 a3|.98.m......Tv...|
+  *       |until 0x170.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x171-0x19d.7 (45)
+  0x000017|   15                                          | .              |          type: "alert" (21) (valid) 0x171-0x171.7 (1)
+  0x000017|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x172-0x173.7 (2)
+  0x000017|            00 28                              |    .(          |          length: 40 0x174-0x175.7 (2)
+  0x000017|                  78 b2 aa 46 27 24 fc 0c e6 b2|      x..F'$....|          encrypted_data: raw bits 0x176-0x19d.7 (40)
+  0x000018|5b 9e c2 0d 1b f9 c8 93 fb 28 a9 12 1f ff 76 e4|[........(....v.|
+  0x000019|0c c7 4b b5 57 e6 55 8b e5 cc 88 a1 c7 4c|     |..K.W.U......L| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xdbe-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdbe-NA (0)
+          |                                               |                |    port: 4431 0xdbe-NA (0)
+          |                                               |                |    has_start: true 0xdbe-NA (0)
+          |                                               |                |    has_end: true 0xdbe-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdbe-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x807.7 (2056)
+          |                                               |                |      records[0:8]: 0x0-0x807.7 (2056)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             65|               e|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|a2 22 f1 cf c0 61 d3 31 e9 df 12 7b 7f fb bd 83|."...a.1...{....|
+  0x000002|20 f1 81 05 3a dc dc 25 62 8e 51               | ...:..%b.Q     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 08      |            ..  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA" (0xc008) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27f.7 (185)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b4            |          ..    |          length: 180 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27f.7 (180)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 b0|             ...|            length: 176 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 67                     |       .g       |              length: 103 0x217-0x218.7 (2)
+  0x000021|                           30 65 02 30 0b b3 9f|         0e.0...|              data: raw bits 0x219-0x27f.7 (103)
+  0x000022|a5 b6 bc 87 14 b4 0e e1 a9 49 4a 12 31 9f 13 cb|.........IJ.1...|
+  *       |until 0x27f.7 (103)                            |                |
+          |                                               |                |        [3]{}: record 0x280-0x288.7 (9)
+  0x000028|16                                             |.               |          type: "handshake" (22) (valid) 0x280-0x280.7 (1)
+  0x000028|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x281-0x282.7 (2)
+  0x000028|         00 04                                 |   ..           |          length: 4 0x283-0x284.7 (2)
+          |                                               |                |          message{}: 0x285-0x288.7 (4)
+  0x000028|               0e                              |     .          |            type: "server_hello_done" (14) 0x285-0x285.7 (1)
+  0x000028|                  00 00 00                     |      ...       |            length: 0 0x286-0x288.7 (3)
+          |                                               |                |            data: raw bits 0x289-NA (0)
+          |                                               |                |        [4]{}: record 0x289-0x337.7 (175)
+  0x000028|                           16                  |         .      |          type: "handshake" (22) (valid) 0x289-0x289.7 (1)
+  0x000028|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x28a-0x28b.7 (2)
+  0x000028|                                    00 aa      |            ..  |          length: 170 0x28c-0x28d.7 (2)
+          |                                               |                |          message{}: 0x28e-0x337.7 (170)
+  0x000028|                                          04   |              . |            type: "new_session_ticket" (4) 0x28e-0x28e.7 (1)
+  0x000028|                                             00|               .|            length: 166 0x28f-0x291.7 (3)
+  0x000029|00 a6                                          |..              |
+  0x000029|      00 00 01 2c                              |  ...,          |            lifetime_hint: 300 0x292-0x295.7 (4)
+  0x000029|                  00 a0                        |      ..        |            ticket_length: 160 0x296-0x297.7 (2)
+  0x000029|                        6f 7d e1 6c 67 99 7a b0|        o}.lg.z.|            ticket: raw bits 0x298-0x337.7 (160)
+  0x00002a|7e f2 61 6e a4 37 9e 3d b8 72 f7 71 0e cd ab b6|~.an.7.=.r.q....|
+  *       |until 0x337.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x338-0x33d.7 (6)
+  0x000033|                        14                     |        .       |          type: "change_cipher_spec" (20) (valid) 0x338-0x338.7 (1)
+  0x000033|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x339-0x33a.7 (2)
+  0x000033|                                 00 01         |           ..   |          length: 1 0x33b-0x33c.7 (2)
+          |                                               |                |          message{}: 0x33d-0x33d.7 (1)
+  0x000033|                                       01      |             .  |            type: 1 0x33d-0x33d.7 (1)
+          |                                               |                |        [6]{}: record 0x33e-0x37a.7 (61)
+  0x000033|                                          16   |              . |          type: "handshake" (22) (valid) 0x33e-0x33e.7 (1)
+  0x000033|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x33f-0x340.7 (2)
+  0x000034|03                                             |.               |
+  0x000034|   00 38                                       | .8             |          length: 56 0x341-0x342.7 (2)
+  0x000034|         e3 d1 64 f8 1e 46 e0 2d 2b b3 a0 a9 cb|   ..d..F.-+....|          encrypted_data: raw bits 0x343-0x37a.7 (56)
+  0x000035|d3 94 a7 d8 b1 64 d9 20 d6 4c d2 12 82 49 28 9f|.....d. .L...I(.|
+  *       |until 0x37a.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            75 6f 38 c4 e7 39 1f 64 64 55 5c 05|    uo8..9.ddU\.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x37b-0x807.7 (1165)
+  0x000037|                                 17            |           .    |          type: "application_data" (23) (valid) 0x37b-0x37b.7 (1)
+  0x000037|                                    03 03      |            ..  |          version: "tls1.2" (0x303) (valid) 0x37c-0x37d.7 (2)
+  0x000037|                                          04 88|              ..|          length: 1160 0x37e-0x37f.7 (2)
+  0x000038|1e fd 34 cc 82 1c cf 04 52 b0 4c e8 63 8c 9a 64|..4.....R.L.c..d|          encrypted_data: raw bits 0x380-0x807.7 (1160)
+  *       |until 0x807.7 (end) (1160)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x114f.7 (4432)
+    *     |until 0x114f.7 (end) (4432)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x114f.7 (4432)
+    *     |until 0x114f.7 (end) (4432)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,520 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xde6-NA (0)
+          |                                               |                |  client{}: 0xde6-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xde6-NA (0)
+          |                                               |                |    port: 42411 0xde6-NA (0)
+          |                                               |                |    has_start: true 0xde6-NA (0)
+          |                                               |                |    has_end: false 0xde6-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xde6-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1b5.7 (438)
+          |                                               |                |      records[0:6]: 0x0-0x1b5.7 (438)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             e2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|f4 40 1b 52 af f4 7a 34 56 52 65 24 d1 88 da 30|.@.R..z4VRe$...0|
+  0x000002|dd 21 37 1c c4 79 23 fb 13 62 1b               |.!7..y#..b.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 09|              ..|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" (0xc009) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 85 ac 71 38 92 4f 93 f0 f5 8b 62 ac 25 d1 18|...q8.O....b.%..|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x13b.7 (69)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 40            |          .@    |          length: 64 0xfa-0xfb.7 (2)
+  0x00000f|                                    ff 5b c9 65|            .[.e|          encrypted_data: raw bits 0xfc-0x13b.7 (64)
+  0x000010|08 c3 50 0c 18 51 0f 08 81 50 46 81 ba 30 e1 8c|..P..Q...PF..0..|
+  *       |until 0x13b.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ad f9 6e b9 07 d9 03 8b fd 92 be d3|    ..n.........|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x13c-0x180.7 (69)
+  0x000013|                                    17         |            .   |          type: "application_data" (23) (valid) 0x13c-0x13c.7 (1)
+  0x000013|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x13d-0x13e.7 (2)
+  0x000013|                                             00|               .|          length: 64 0x13f-0x140.7 (2)
+  0x000014|40                                             |@               |
+  0x000014|   b5 37 7c d6 06 19 f5 9e 8f 4a ab 30 fb b9 0a| .7|......J.0...|          encrypted_data: raw bits 0x141-0x180.7 (64)
+  0x000015|a5 7c 84 3b db 39 ac 2d b2 2a 59 c1 9f 52 8d 61|.|.;.9.-.*Y..R.a|
+  *       |until 0x180.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x181-0x1b5.7 (53)
+  0x000018|   15                                          | .              |          type: "alert" (21) (valid) 0x181-0x181.7 (1)
+  0x000018|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x182-0x183.7 (2)
+  0x000018|            00 30                              |    .0          |          length: 48 0x184-0x185.7 (2)
+  0x000018|                  60 0f bb ed 8a 17 46 77 d7 5b|      `.....Fw.[|          encrypted_data: raw bits 0x186-0x1b5.7 (48)
+  0x000019|e5 0d c5 0d 22 6b ca 32 4e 94 06 f5 18 e0 f7 a4|...."k.2N.......|
+  *       |until 0x1b5.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xde6-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xde6-NA (0)
+          |                                               |                |    port: 4431 0xde6-NA (0)
+          |                                               |                |    has_start: true 0xde6-NA (0)
+          |                                               |                |    has_end: true 0xde6-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xde6-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x817.7 (2072)
+          |                                               |                |      records[0:8]: 0x0-0x817.7 (2072)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             0c|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|5e 36 ec 30 4e df 89 7e 1a ec 3a 2a 33 de 9c 85|^6.0N..~..:*3...|
+  0x000002|c9 33 1a 52 ff 71 5e f4 f5 a8 fd               |.3.R.q^....     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 09      |            ..  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA" (0xc009) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27f.7 (185)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b4            |          ..    |          length: 180 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27f.7 (180)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 b0|             ...|            length: 176 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 67                     |       .g       |              length: 103 0x217-0x218.7 (2)
+  0x000021|                           30 65 02 31 00 ac a8|         0e.1...|              data: raw bits 0x219-0x27f.7 (103)
+  0x000022|6f f1 8c 03 4c c8 ed 4e 03 fe 43 67 13 f2 e8 b3|o...L..N..Cg....|
+  *       |until 0x27f.7 (103)                            |                |
+          |                                               |                |        [3]{}: record 0x280-0x288.7 (9)
+  0x000028|16                                             |.               |          type: "handshake" (22) (valid) 0x280-0x280.7 (1)
+  0x000028|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x281-0x282.7 (2)
+  0x000028|         00 04                                 |   ..           |          length: 4 0x283-0x284.7 (2)
+          |                                               |                |          message{}: 0x285-0x288.7 (4)
+  0x000028|               0e                              |     .          |            type: "server_hello_done" (14) 0x285-0x285.7 (1)
+  0x000028|                  00 00 00                     |      ...       |            length: 0 0x286-0x288.7 (3)
+          |                                               |                |            data: raw bits 0x289-NA (0)
+          |                                               |                |        [4]{}: record 0x289-0x337.7 (175)
+  0x000028|                           16                  |         .      |          type: "handshake" (22) (valid) 0x289-0x289.7 (1)
+  0x000028|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x28a-0x28b.7 (2)
+  0x000028|                                    00 aa      |            ..  |          length: 170 0x28c-0x28d.7 (2)
+          |                                               |                |          message{}: 0x28e-0x337.7 (170)
+  0x000028|                                          04   |              . |            type: "new_session_ticket" (4) 0x28e-0x28e.7 (1)
+  0x000028|                                             00|               .|            length: 166 0x28f-0x291.7 (3)
+  0x000029|00 a6                                          |..              |
+  0x000029|      00 00 01 2c                              |  ...,          |            lifetime_hint: 300 0x292-0x295.7 (4)
+  0x000029|                  00 a0                        |      ..        |            ticket_length: 160 0x296-0x297.7 (2)
+  0x000029|                        6f 7d e1 6c 67 99 7a b0|        o}.lg.z.|            ticket: raw bits 0x298-0x337.7 (160)
+  0x00002a|7e f2 61 6e a4 37 9e 3d 83 ef de 05 02 82 fe 70|~.an.7.=.......p|
+  *       |until 0x337.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x338-0x33d.7 (6)
+  0x000033|                        14                     |        .       |          type: "change_cipher_spec" (20) (valid) 0x338-0x338.7 (1)
+  0x000033|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x339-0x33a.7 (2)
+  0x000033|                                 00 01         |           ..   |          length: 1 0x33b-0x33c.7 (2)
+          |                                               |                |          message{}: 0x33d-0x33d.7 (1)
+  0x000033|                                       01      |             .  |            type: 1 0x33d-0x33d.7 (1)
+          |                                               |                |        [6]{}: record 0x33e-0x382.7 (69)
+  0x000033|                                          16   |              . |          type: "handshake" (22) (valid) 0x33e-0x33e.7 (1)
+  0x000033|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x33f-0x340.7 (2)
+  0x000034|03                                             |.               |
+  0x000034|   00 40                                       | .@             |          length: 64 0x341-0x342.7 (2)
+  0x000034|         28 9c a7 37 1e ef d3 11 f2 44 63 2c 09|   (..7.....Dc,.|          encrypted_data: raw bits 0x343-0x382.7 (64)
+  0x000035|bc c9 68 c5 2e 3b 6d 7a f4 fb 4c 09 5b 52 c6 b2|..h..;mz..L.[R..|
+  *       |until 0x382.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            cf d0 70 f2 71 55 23 cd 00 33 ff 0b|    ..p.qU#..3..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x383-0x817.7 (1173)
+  0x000038|         17                                    |   .            |          type: "application_data" (23) (valid) 0x383-0x383.7 (1)
+  0x000038|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x384-0x385.7 (2)
+  0x000038|                  04 90                        |      ..        |          length: 1168 0x386-0x387.7 (2)
+  0x000038|                        3f b8 e5 59 00 82 4c 44|        ?..Y..LD|          encrypted_data: raw bits 0x388-0x817.7 (1168)
+  0x000039|36 18 b9 a0 e1 f7 18 2c 1a 4d 41 df 40 db 9e a6|6......,.MA.@...|
+  *       |until 0x817.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1149.7 (4426)
+    *     |until 0x1149.7 (end) (4426)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1149.7 (4426)
+    *     |until 0x1149.7 (end) (4426)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,520 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe36-NA (0)
+          |                                               |                |  client{}: 0xe36-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe36-NA (0)
+          |                                               |                |    port: 42409 0xe36-NA (0)
+          |                                               |                |    has_start: true 0xe36-NA (0)
+          |                                               |                |    has_end: false 0xe36-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe36-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1e5.7 (486)
+          |                                               |                |      records[0:6]: 0x0-0x1e5.7 (486)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             22|               "|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|0a b9 b3 15 31 47 e9 8d 23 28 b5 c2 e4 72 d9 d4|....1G..#(...r..|
+  0x000002|0d 54 8b e0 51 68 fb 5c 09 4d 9b               |.T..Qh.\.M.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 23|              .#|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" (0xc023) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 ef b3 c0 48 4c 24 d3 88 cc b6 69 1c 22 41 3c|....HL$....i."A<|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x14b.7 (85)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 50            |          .P    |          length: 80 0xfa-0xfb.7 (2)
+  0x00000f|                                    2f 60 f6 c6|            /`..|          encrypted_data: raw bits 0xfc-0x14b.7 (80)
+  0x000010|0b 22 23 04 9c ef b1 3a aa ce 43 cb 30 f6 80 ed|."#....:..C.0...|
+  *       |until 0x14b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            90 e1 25 2b f2 ec 41 85 b5 6a 6c a4|    ..%+..A..jl.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x14c-0x1a0.7 (85)
+  0x000014|                                    17         |            .   |          type: "application_data" (23) (valid) 0x14c-0x14c.7 (1)
+  0x000014|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x14d-0x14e.7 (2)
+  0x000014|                                             00|               .|          length: 80 0x14f-0x150.7 (2)
+  0x000015|50                                             |P               |
+  0x000015|   cb 5f 36 c4 b9 2b 07 10 c7 e1 b4 cf 98 72 b1| ._6..+.......r.|          encrypted_data: raw bits 0x151-0x1a0.7 (80)
+  0x000016|16 4b 18 58 aa 8a 9b 33 6f 99 67 2b e9 01 46 f1|.K.X...3o.g+..F.|
+  *       |until 0x1a0.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x1a1-0x1e5.7 (69)
+  0x00001a|   15                                          | .              |          type: "alert" (21) (valid) 0x1a1-0x1a1.7 (1)
+  0x00001a|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x1a2-0x1a3.7 (2)
+  0x00001a|            00 40                              |    .@          |          length: 64 0x1a4-0x1a5.7 (2)
+  0x00001a|                  a5 55 74 d6 bf a7 f3 0e d2 37|      .Ut......7|          encrypted_data: raw bits 0x1a6-0x1e5.7 (64)
+  0x00001b|49 e2 42 b8 b7 3d 8e f5 f5 bb 6c 18 cc dd 47 19|I.B..=....l...G.|
+  *       |until 0x1e5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe36-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe36-NA (0)
+          |                                               |                |    port: 4431 0xe36-NA (0)
+          |                                               |                |    has_start: true 0xe36-NA (0)
+          |                                               |                |    has_end: true 0xe36-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe36-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x837.7 (2104)
+          |                                               |                |      records[0:8]: 0x0-0x837.7 (2104)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             b6|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|40 ff ec 8b a8 a0 97 e0 30 55 bf d2 dd ff 81 c7|@.......0U......|
+  0x000002|87 1d ca f5 ae 9f 83 d9 7b 38 51               |........{8Q     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 23      |            .#  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256" (0xc023) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27f.7 (185)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b4            |          ..    |          length: 180 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27f.7 (180)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 b0|             ...|            length: 176 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 67                     |       .g       |              length: 103 0x217-0x218.7 (2)
+  0x000021|                           30 65 02 30 36 a8 a5|         0e.06..|              data: raw bits 0x219-0x27f.7 (103)
+  0x000022|c1 b1 f1 b8 ef 6a 60 64 d5 9a 45 54 6e 58 c0 55|.....j`d..ETnX.U|
+  *       |until 0x27f.7 (103)                            |                |
+          |                                               |                |        [3]{}: record 0x280-0x288.7 (9)
+  0x000028|16                                             |.               |          type: "handshake" (22) (valid) 0x280-0x280.7 (1)
+  0x000028|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x281-0x282.7 (2)
+  0x000028|         00 04                                 |   ..           |          length: 4 0x283-0x284.7 (2)
+          |                                               |                |          message{}: 0x285-0x288.7 (4)
+  0x000028|               0e                              |     .          |            type: "server_hello_done" (14) 0x285-0x285.7 (1)
+  0x000028|                  00 00 00                     |      ...       |            length: 0 0x286-0x288.7 (3)
+          |                                               |                |            data: raw bits 0x289-NA (0)
+          |                                               |                |        [4]{}: record 0x289-0x337.7 (175)
+  0x000028|                           16                  |         .      |          type: "handshake" (22) (valid) 0x289-0x289.7 (1)
+  0x000028|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x28a-0x28b.7 (2)
+  0x000028|                                    00 aa      |            ..  |          length: 170 0x28c-0x28d.7 (2)
+          |                                               |                |          message{}: 0x28e-0x337.7 (170)
+  0x000028|                                          04   |              . |            type: "new_session_ticket" (4) 0x28e-0x28e.7 (1)
+  0x000028|                                             00|               .|            length: 166 0x28f-0x291.7 (3)
+  0x000029|00 a6                                          |..              |
+  0x000029|      00 00 01 2c                              |  ...,          |            lifetime_hint: 300 0x292-0x295.7 (4)
+  0x000029|                  00 a0                        |      ..        |            ticket_length: 160 0x296-0x297.7 (2)
+  0x000029|                        6f 7d e1 6c 67 99 7a b0|        o}.lg.z.|            ticket: raw bits 0x298-0x337.7 (160)
+  0x00002a|7e f2 61 6e a4 37 9e 3d f1 35 8b 5f 16 cc 87 d8|~.an.7.=.5._....|
+  *       |until 0x337.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x338-0x33d.7 (6)
+  0x000033|                        14                     |        .       |          type: "change_cipher_spec" (20) (valid) 0x338-0x338.7 (1)
+  0x000033|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x339-0x33a.7 (2)
+  0x000033|                                 00 01         |           ..   |          length: 1 0x33b-0x33c.7 (2)
+          |                                               |                |          message{}: 0x33d-0x33d.7 (1)
+  0x000033|                                       01      |             .  |            type: 1 0x33d-0x33d.7 (1)
+          |                                               |                |        [6]{}: record 0x33e-0x392.7 (85)
+  0x000033|                                          16   |              . |          type: "handshake" (22) (valid) 0x33e-0x33e.7 (1)
+  0x000033|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x33f-0x340.7 (2)
+  0x000034|03                                             |.               |
+  0x000034|   00 50                                       | .P             |          length: 80 0x341-0x342.7 (2)
+  0x000034|         15 7f 70 e5 7c 01 45 a7 56 a3 17 26 86|   ..p.|.E.V..&.|          encrypted_data: raw bits 0x343-0x392.7 (80)
+  0x000035|05 70 c8 9e a5 3a 9d 4a 25 66 52 ea 25 1a 2d d8|.p...:.J%fR.%.-.|
+  *       |until 0x392.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            d5 cb ba 05 1e b7 eb 4f 60 c8 39 ec|    .......O`.9.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x393-0x837.7 (1189)
+  0x000039|         17                                    |   .            |          type: "application_data" (23) (valid) 0x393-0x393.7 (1)
+  0x000039|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x394-0x395.7 (2)
+  0x000039|                  04 a0                        |      ..        |          length: 1184 0x396-0x397.7 (2)
+  0x000039|                        07 4f 3b 08 ed 62 1f c0|        .O;..b..|          encrypted_data: raw bits 0x398-0x837.7 (1184)
+  0x00003a|81 5d 6e 2c 69 f1 28 6e c1 46 d2 5f 6e 20 6d 19|.]n,i.(n.F._n m.|
+  *       |until 0x837.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1152.7 (4435)
+    *     |until 0x1152.7 (end) (4435)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1152.7 (4435)
+    *     |until 0x1152.7 (end) (4435)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256.pcap.fqtest

@@ -0,0 +1,518 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xd99-NA (0)
+          |                                               |                |  client{}: 0xd99-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd99-NA (0)
+          |                                               |                |    port: 42407 0xd99-NA (0)
+          |                                               |                |    has_start: true 0xd99-NA (0)
+          |                                               |                |    has_end: false 0xd99-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd99-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x186.7 (391)
+          |                                               |                |      records[0:6]: 0x0-0x186.7 (391)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             a4|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|50 81 e7 38 cf d4 0b 27 32 cd f9 19 d9 63 73 58|P..8...'2....csX|
+  0x000002|04 5f ba 53 cb 91 76 12 7a e8 cc               |._.S..v.z..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 2b|              .+|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" (0xc02b) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 36 b9 14 a6 7e a7 cd a5 19 52 90 d7 2d cb e2|.6...~....R..-..|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x12c.7 (54)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 31            |          .1    |          length: 49 0xfa-0xfb.7 (2)
+  0x00000f|                                    6c b6 34 35|            l.45|          encrypted_data: raw bits 0xfc-0x12c.7 (49)
+  0x000010|60 d7 e7 3c 27 a3 3d bd 89 95 2f 51 e0 2c f3 b1|`..<'.=.../Q.,..|
+  *       |until 0x12c.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5b b3 2c 93 77 82 25 0f ef 47 b6 dd|    [.,.w.%..G..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x12d-0x161.7 (53)
+  0x000012|                                       17      |             .  |          type: "application_data" (23) (valid) 0x12d-0x12d.7 (1)
+  0x000012|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x12e-0x12f.7 (2)
+  0x000013|00 30                                          |.0              |          length: 48 0x130-0x131.7 (2)
+  0x000013|      6c b6 34 35 60 d7 e7 3d f6 50 39 24 6d 79|  l.45`..=.P9$my|          encrypted_data: raw bits 0x132-0x161.7 (48)
+  0x000014|c5 fe 8b 84 29 cd a0 53 90 16 82 58 1f 15 29 a6|....)..S...X..).|
+  *       |until 0x161.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x162-0x186.7 (37)
+  0x000016|      15                                       |  .             |          type: "alert" (21) (valid) 0x162-0x162.7 (1)
+  0x000016|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x163-0x164.7 (2)
+  0x000016|               00 20                           |     .          |          length: 32 0x165-0x166.7 (2)
+  0x000016|                     6c b6 34 35 60 d7 e7 3e 48|       l.45`..>H|          encrypted_data: raw bits 0x167-0x186.7 (32)
+  0x000017|58 7d 5d b7 43 c4 87 7b 6b b1 3d 52 d2 24 16 15|X}].C..{k.=R.$..|
+  0x000018|da 51 55 90 55 06 e7|                          |.QU.U..|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xd99-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd99-NA (0)
+          |                                               |                |    port: 4431 0xd99-NA (0)
+          |                                               |                |    has_start: true 0xd99-NA (0)
+          |                                               |                |    has_end: true 0xd99-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd99-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x7f9.7 (2042)
+          |                                               |                |      records[0:8]: 0x0-0x7f9.7 (2042)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             14|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|8d b7 d5 43 61 42 b4 99 e9 50 f4 5a 9a 81 cd 76|...CaB...P.Z...v|
+  0x000002|ba c2 3b 6c 18 8e 4d 80 3f 9e f9               |..;l..M.?..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 2b      |            .+  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" (0xc02b) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27e.7 (184)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b3            |          ..    |          length: 179 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27e.7 (179)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 af|             ...|            length: 175 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 66                     |       .f       |              length: 102 0x217-0x218.7 (2)
+  0x000021|                           30 64 02 30 05 bb bf|         0d.0...|              data: raw bits 0x219-0x27e.7 (102)
+  0x000022|ba ae a6 87 61 2c 5e 36 70 da 4e 61 42 c9 a4 82|....a,^6p.NaB...|
+  *       |until 0x27e.7 (102)                            |                |
+          |                                               |                |        [3]{}: record 0x27f-0x287.7 (9)
+  0x000027|                                             16|               .|          type: "handshake" (22) (valid) 0x27f-0x27f.7 (1)
+  0x000028|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x280-0x281.7 (2)
+  0x000028|      00 04                                    |  ..            |          length: 4 0x282-0x283.7 (2)
+          |                                               |                |          message{}: 0x284-0x287.7 (4)
+  0x000028|            0e                                 |    .           |            type: "server_hello_done" (14) 0x284-0x284.7 (1)
+  0x000028|               00 00 00                        |     ...        |            length: 0 0x285-0x287.7 (3)
+          |                                               |                |            data: raw bits 0x288-NA (0)
+          |                                               |                |        [4]{}: record 0x288-0x336.7 (175)
+  0x000028|                        16                     |        .       |          type: "handshake" (22) (valid) 0x288-0x288.7 (1)
+  0x000028|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x289-0x28a.7 (2)
+  0x000028|                                 00 aa         |           ..   |          length: 170 0x28b-0x28c.7 (2)
+          |                                               |                |          message{}: 0x28d-0x336.7 (170)
+  0x000028|                                       04      |             .  |            type: "new_session_ticket" (4) 0x28d-0x28d.7 (1)
+  0x000028|                                          00 00|              ..|            length: 166 0x28e-0x290.7 (3)
+  0x000029|a6                                             |.               |
+  0x000029|   00 00 01 2c                                 | ...,           |            lifetime_hint: 300 0x291-0x294.7 (4)
+  0x000029|               00 a0                           |     ..         |            ticket_length: 160 0x295-0x296.7 (2)
+  0x000029|                     6f 7d e1 6c 67 99 7a b0 7e|       o}.lg.z.~|            ticket: raw bits 0x297-0x336.7 (160)
+  0x00002a|f2 61 6e a4 37 9e 3d f0 60 e0 f3 66 d0 d6 63 ac|.an.7.=.`..f..c.|
+  *       |until 0x336.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x337-0x33c.7 (6)
+  0x000033|                     14                        |       .        |          type: "change_cipher_spec" (20) (valid) 0x337-0x337.7 (1)
+  0x000033|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x338-0x339.7 (2)
+  0x000033|                              00 01            |          ..    |          length: 1 0x33a-0x33b.7 (2)
+          |                                               |                |          message{}: 0x33c-0x33c.7 (1)
+  0x000033|                                    01         |            .   |            type: 1 0x33c-0x33c.7 (1)
+          |                                               |                |        [6]{}: record 0x33d-0x372.7 (54)
+  0x000033|                                       16      |             .  |          type: "handshake" (22) (valid) 0x33d-0x33d.7 (1)
+  0x000033|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x33e-0x33f.7 (2)
+  0x000034|00 31                                          |.1              |          length: 49 0x340-0x341.7 (2)
+  0x000034|      dc e7 76 90 4a bf b2 af df 9f 66 09 97 c5|  ..v.J.....f...|          encrypted_data: raw bits 0x342-0x372.7 (49)
+  0x000035|8a 01 05 c3 76 45 9c 53 9e 61 84 b9 16 13 e4 85|....vE.S.a......|
+  *       |until 0x372.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            38 04 c2 77 35 b8 d1 21 10 66 90 25|    8..w5..!.f.%|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x373-0x7f9.7 (1159)
+  0x000037|         17                                    |   .            |          type: "application_data" (23) (valid) 0x373-0x373.7 (1)
+  0x000037|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x374-0x375.7 (2)
+  0x000037|                  04 82                        |      ..        |          length: 1154 0x376-0x377.7 (2)
+  0x000037|                        dc e7 76 90 4a bf b2 b0|        ..v.J...|          encrypted_data: raw bits 0x378-0x7f9.7 (1154)
+  0x000038|d9 86 84 c4 f5 7b 92 51 9c 66 a1 cf 32 a8 79 2a|.....{.Q.f..2.y*|
+  *       |until 0x7f9.7 (end) (1154)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x115e.7 (4447)
+    *     |until 0x115e.7 (end) (4447)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x115e.7 (4447)
+    *     |until 0x115e.7 (end) (4447)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,520 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xde6-NA (0)
+          |                                               |                |  client{}: 0xde6-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xde6-NA (0)
+          |                                               |                |    port: 42380 0xde6-NA (0)
+          |                                               |                |    has_start: true 0xde6-NA (0)
+          |                                               |                |    has_end: false 0xde6-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xde6-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1b5.7 (438)
+          |                                               |                |      records[0:6]: 0x0-0x1b5.7 (438)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             b3|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|3d 30 f7 a3 87 61 12 a1 e0 b7 7d 87 e1 a5 33 68|=0...a....}...3h|
+  0x000002|61 02 e9 5a d7 c5 d2 9c 77 df ee               |a..Z....w..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 0a|              ..|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" (0xc00a) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 b5 b0 2a 7b bf b9 5b 09 ec 0c a2 4c 01 0d 70|...*{..[....L..p|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x13b.7 (69)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 40            |          .@    |          length: 64 0xfa-0xfb.7 (2)
+  0x00000f|                                    67 da d6 66|            g..f|          encrypted_data: raw bits 0xfc-0x13b.7 (64)
+  0x000010|f3 f0 10 fa 23 86 a8 c5 06 6c 97 17 c7 20 e1 49|....#....l... .I|
+  *       |until 0x13b.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ab 98 74 9b da 3c 4e 8b d4 34 15 79|    ..t..<N..4.y|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x13c-0x180.7 (69)
+  0x000013|                                    17         |            .   |          type: "application_data" (23) (valid) 0x13c-0x13c.7 (1)
+  0x000013|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x13d-0x13e.7 (2)
+  0x000013|                                             00|               .|          length: 64 0x13f-0x140.7 (2)
+  0x000014|40                                             |@               |
+  0x000014|   c8 8b a6 6b 6b 01 64 89 17 65 13 c4 73 66 7a| ...kk.d..e..sfz|          encrypted_data: raw bits 0x141-0x180.7 (64)
+  0x000015|df 0d e6 da 8d 55 97 d8 f1 eb 9b 6f 6b 4c 1f 82|.....U.....okL..|
+  *       |until 0x180.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x181-0x1b5.7 (53)
+  0x000018|   15                                          | .              |          type: "alert" (21) (valid) 0x181-0x181.7 (1)
+  0x000018|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x182-0x183.7 (2)
+  0x000018|            00 30                              |    .0          |          length: 48 0x184-0x185.7 (2)
+  0x000018|                  47 2c fc 08 3f 95 02 0a 06 88|      G,..?.....|          encrypted_data: raw bits 0x186-0x1b5.7 (48)
+  0x000019|69 3c 0f b5 92 ed a6 08 2a c0 b6 2a f1 67 12 ae|i<......*..*.g..|
+  *       |until 0x1b5.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xde6-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xde6-NA (0)
+          |                                               |                |    port: 4431 0xde6-NA (0)
+          |                                               |                |    has_start: true 0xde6-NA (0)
+          |                                               |                |    has_end: true 0xde6-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xde6-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x817.7 (2072)
+          |                                               |                |      records[0:8]: 0x0-0x817.7 (2072)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             62|               b|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|0d 4f 12 a0 ed 68 53 e4 31 53 a1 3f a7 e5 a3 eb|.O...hS.1S.?....|
+  0x000002|26 a4 97 15 6c fd 5e ef 08 2d 49               |&...l.^..-I     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 0a      |            ..  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA" (0xc00a) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27f.7 (185)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b4            |          ..    |          length: 180 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27f.7 (180)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 b0|             ...|            length: 176 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 67                     |       .g       |              length: 103 0x217-0x218.7 (2)
+  0x000021|                           30 65 02 31 00 ec 8d|         0e.1...|              data: raw bits 0x219-0x27f.7 (103)
+  0x000022|4f c0 f3 85 98 74 a1 9e 6e f5 6a 8c b1 4b 37 5a|O....t..n.j..K7Z|
+  *       |until 0x27f.7 (103)                            |                |
+          |                                               |                |        [3]{}: record 0x280-0x288.7 (9)
+  0x000028|16                                             |.               |          type: "handshake" (22) (valid) 0x280-0x280.7 (1)
+  0x000028|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x281-0x282.7 (2)
+  0x000028|         00 04                                 |   ..           |          length: 4 0x283-0x284.7 (2)
+          |                                               |                |          message{}: 0x285-0x288.7 (4)
+  0x000028|               0e                              |     .          |            type: "server_hello_done" (14) 0x285-0x285.7 (1)
+  0x000028|                  00 00 00                     |      ...       |            length: 0 0x286-0x288.7 (3)
+          |                                               |                |            data: raw bits 0x289-NA (0)
+          |                                               |                |        [4]{}: record 0x289-0x337.7 (175)
+  0x000028|                           16                  |         .      |          type: "handshake" (22) (valid) 0x289-0x289.7 (1)
+  0x000028|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x28a-0x28b.7 (2)
+  0x000028|                                    00 aa      |            ..  |          length: 170 0x28c-0x28d.7 (2)
+          |                                               |                |          message{}: 0x28e-0x337.7 (170)
+  0x000028|                                          04   |              . |            type: "new_session_ticket" (4) 0x28e-0x28e.7 (1)
+  0x000028|                                             00|               .|            length: 166 0x28f-0x291.7 (3)
+  0x000029|00 a6                                          |..              |
+  0x000029|      00 00 01 2c                              |  ...,          |            lifetime_hint: 300 0x292-0x295.7 (4)
+  0x000029|                  00 a0                        |      ..        |            ticket_length: 160 0x296-0x297.7 (2)
+  0x000029|                        6f 7d e1 6c 67 99 7a b0|        o}.lg.z.|            ticket: raw bits 0x298-0x337.7 (160)
+  0x00002a|7e f2 61 6e a4 37 9e 3d ed 4f 82 de a3 de 1d 7d|~.an.7.=.O.....}|
+  *       |until 0x337.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x338-0x33d.7 (6)
+  0x000033|                        14                     |        .       |          type: "change_cipher_spec" (20) (valid) 0x338-0x338.7 (1)
+  0x000033|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x339-0x33a.7 (2)
+  0x000033|                                 00 01         |           ..   |          length: 1 0x33b-0x33c.7 (2)
+          |                                               |                |          message{}: 0x33d-0x33d.7 (1)
+  0x000033|                                       01      |             .  |            type: 1 0x33d-0x33d.7 (1)
+          |                                               |                |        [6]{}: record 0x33e-0x382.7 (69)
+  0x000033|                                          16   |              . |          type: "handshake" (22) (valid) 0x33e-0x33e.7 (1)
+  0x000033|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x33f-0x340.7 (2)
+  0x000034|03                                             |.               |
+  0x000034|   00 40                                       | .@             |          length: 64 0x341-0x342.7 (2)
+  0x000034|         ea 79 34 86 27 c5 62 7b 47 20 02 06 39|   .y4.'.b{G ..9|          encrypted_data: raw bits 0x343-0x382.7 (64)
+  0x000035|41 c6 89 73 45 c8 7f 70 b1 c9 6a 95 82 9c b7 36|A..sE..p..j....6|
+  *       |until 0x382.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            29 06 d3 55 ac 6e 42 40 23 87 25 ab|    )..U.nB@#.%.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x383-0x817.7 (1173)
+  0x000038|         17                                    |   .            |          type: "application_data" (23) (valid) 0x383-0x383.7 (1)
+  0x000038|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x384-0x385.7 (2)
+  0x000038|                  04 90                        |      ..        |          length: 1168 0x386-0x387.7 (2)
+  0x000038|                        cd 07 04 06 b1 f6 b3 09|        ........|          encrypted_data: raw bits 0x388-0x817.7 (1168)
+  0x000039|cb d4 28 aa 98 c6 cc 29 19 7d 54 81 8b f5 79 8c|..(....).}T...y.|
+  *       |until 0x817.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1149.7 (4426)
+    *     |until 0x1149.7 (end) (4426)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1149.7 (4426)
+    *     |until 0x1149.7 (end) (4426)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384.pcap.fqtest

@@ -0,0 +1,520 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe86-NA (0)
+          |                                               |                |  client{}: 0xe86-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe86-NA (0)
+          |                                               |                |    port: 42378 0xe86-NA (0)
+          |                                               |                |    has_start: true 0xe86-NA (0)
+          |                                               |                |    has_end: false 0xe86-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe86-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x215.7 (534)
+          |                                               |                |      records[0:6]: 0x0-0x215.7 (534)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             47|               G|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ce 0b 34 c1 84 71 f0 6c bc 00 c0 fc 8b 05 69 a2|..4..q.l......i.|
+  0x000002|db 68 ae b0 8f cf f5 bb 86 ff 35               |.h........5     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 24|              .$|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" (0xc024) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 6e fd 6e a7 68 b3 e5 13 3e 18 da 2f 62 bd b5|.n.n.h...>../b..|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x15b.7 (101)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 60            |          .`    |          length: 96 0xfa-0xfb.7 (2)
+  0x00000f|                                    af 62 32 52|            .b2R|          encrypted_data: raw bits 0xfc-0x15b.7 (96)
+  0x000010|67 2a bd fe e3 ea 6c 99 00 47 17 7c a7 03 31 cd|g*....l..G.|..1.|
+  *       |until 0x15b.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ba ba 7d a9 c6 27 29 a3 cd b7 48 af|    ..}..')...H.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x15c-0x1c0.7 (101)
+  0x000015|                                    17         |            .   |          type: "application_data" (23) (valid) 0x15c-0x15c.7 (1)
+  0x000015|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x15d-0x15e.7 (2)
+  0x000015|                                             00|               .|          length: 96 0x15f-0x160.7 (2)
+  0x000016|60                                             |`               |
+  0x000016|   89 96 1c fd 23 12 19 96 f6 d5 9d c7 01 68 72| ....#........hr|          encrypted_data: raw bits 0x161-0x1c0.7 (96)
+  0x000017|ce a6 0f ed 66 43 c1 d8 74 fe c5 2a b9 06 87 34|....fC..t..*...4|
+  *       |until 0x1c0.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x1c1-0x215.7 (85)
+  0x00001c|   15                                          | .              |          type: "alert" (21) (valid) 0x1c1-0x1c1.7 (1)
+  0x00001c|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x1c2-0x1c3.7 (2)
+  0x00001c|            00 50                              |    .P          |          length: 80 0x1c4-0x1c5.7 (2)
+  0x00001c|                  a8 b2 67 cc 43 2b 6b 3c da de|      ..g.C+k<..|          encrypted_data: raw bits 0x1c6-0x215.7 (80)
+  0x00001d|d5 60 94 73 6d 5b 32 c5 83 1d bb fd db ba 5b 47|.`.sm[2.......[G|
+  *       |until 0x215.7 (end) (80)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe86-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe86-NA (0)
+          |                                               |                |    port: 4431 0xe86-NA (0)
+          |                                               |                |    has_start: true 0xe86-NA (0)
+          |                                               |                |    has_end: true 0xe86-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe86-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x857.7 (2136)
+          |                                               |                |      records[0:8]: 0x0-0x857.7 (2136)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             b2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|de a6 01 cf a4 6b e9 74 65 0e ef d0 ff 91 ae fc|.....k.te.......|
+  0x000002|d9 db d6 fc f6 6f 25 82 b6 24 84               |.....o%..$.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 24      |            .$  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" (0xc024) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27f.7 (185)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b4            |          ..    |          length: 180 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27f.7 (180)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 b0|             ...|            length: 176 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 67                     |       .g       |              length: 103 0x217-0x218.7 (2)
+  0x000021|                           30 65 02 30 77 9b b9|         0e.0w..|              data: raw bits 0x219-0x27f.7 (103)
+  0x000022|3c 9a e5 3b 24 4a 72 45 43 3c 74 d1 52 07 f2 d4|<..;$JrEC<t.R...|
+  *       |until 0x27f.7 (103)                            |                |
+          |                                               |                |        [3]{}: record 0x280-0x288.7 (9)
+  0x000028|16                                             |.               |          type: "handshake" (22) (valid) 0x280-0x280.7 (1)
+  0x000028|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x281-0x282.7 (2)
+  0x000028|         00 04                                 |   ..           |          length: 4 0x283-0x284.7 (2)
+          |                                               |                |          message{}: 0x285-0x288.7 (4)
+  0x000028|               0e                              |     .          |            type: "server_hello_done" (14) 0x285-0x285.7 (1)
+  0x000028|                  00 00 00                     |      ...       |            length: 0 0x286-0x288.7 (3)
+          |                                               |                |            data: raw bits 0x289-NA (0)
+          |                                               |                |        [4]{}: record 0x289-0x337.7 (175)
+  0x000028|                           16                  |         .      |          type: "handshake" (22) (valid) 0x289-0x289.7 (1)
+  0x000028|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x28a-0x28b.7 (2)
+  0x000028|                                    00 aa      |            ..  |          length: 170 0x28c-0x28d.7 (2)
+          |                                               |                |          message{}: 0x28e-0x337.7 (170)
+  0x000028|                                          04   |              . |            type: "new_session_ticket" (4) 0x28e-0x28e.7 (1)
+  0x000028|                                             00|               .|            length: 166 0x28f-0x291.7 (3)
+  0x000029|00 a6                                          |..              |
+  0x000029|      00 00 01 2c                              |  ...,          |            lifetime_hint: 300 0x292-0x295.7 (4)
+  0x000029|                  00 a0                        |      ..        |            ticket_length: 160 0x296-0x297.7 (2)
+  0x000029|                        6f 7d e1 6c 67 99 7a b0|        o}.lg.z.|            ticket: raw bits 0x298-0x337.7 (160)
+  0x00002a|7e f2 61 6e a4 37 9e 3d b1 e7 fd 61 b2 a1 09 b0|~.an.7.=...a....|
+  *       |until 0x337.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x338-0x33d.7 (6)
+  0x000033|                        14                     |        .       |          type: "change_cipher_spec" (20) (valid) 0x338-0x338.7 (1)
+  0x000033|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x339-0x33a.7 (2)
+  0x000033|                                 00 01         |           ..   |          length: 1 0x33b-0x33c.7 (2)
+          |                                               |                |          message{}: 0x33d-0x33d.7 (1)
+  0x000033|                                       01      |             .  |            type: 1 0x33d-0x33d.7 (1)
+          |                                               |                |        [6]{}: record 0x33e-0x3a2.7 (101)
+  0x000033|                                          16   |              . |          type: "handshake" (22) (valid) 0x33e-0x33e.7 (1)
+  0x000033|                                             03|               .|          version: "tls1.2" (0x303) (valid) 0x33f-0x340.7 (2)
+  0x000034|03                                             |.               |
+  0x000034|   00 60                                       | .`             |          length: 96 0x341-0x342.7 (2)
+  0x000034|         6e 48 ab 02 51 7a 6f 45 05 2f 94 5a 3b|   nH..QzoE./.Z;|          encrypted_data: raw bits 0x343-0x3a2.7 (96)
+  0x000035|f4 c5 cf 47 d2 10 d4 37 f3 ed ee 37 b0 14 be a3|...G...7...7....|
+  *       |until 0x3a2.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            7e aa 1e 3c 54 bd a9 89 67 6f c8 07|    ~..<T...go..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3a3-0x857.7 (1205)
+  0x00003a|         17                                    |   .            |          type: "application_data" (23) (valid) 0x3a3-0x3a3.7 (1)
+  0x00003a|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x3a4-0x3a5.7 (2)
+  0x00003a|                  04 b0                        |      ..        |          length: 1200 0x3a6-0x3a7.7 (2)
+  0x00003a|                        af 5b 8b 5b c6 27 a8 bf|        .[.[.'..|          encrypted_data: raw bits 0x3a8-0x857.7 (1200)
+  0x00003b|07 2d 73 7c 5d 79 15 72 10 7c 80 b1 00 35 7c dd|.-s|]y.r.|...5|.|
+  *       |until 0x857.7 (end) (1200)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1152.7 (4435)
+    *     |until 0x1152.7 (end) (4435)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1152.7 (4435)
+    *     |until 0x1152.7 (end) (4435)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.pcap.fqtest

@@ -0,0 +1,518 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xd9a-NA (0)
+          |                                               |                |  client{}: 0xd9a-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd9a-NA (0)
+          |                                               |                |    port: 42376 0xd9a-NA (0)
+          |                                               |                |    has_start: true 0xd9a-NA (0)
+          |                                               |                |    has_end: false 0xd9a-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd9a-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x186.7 (391)
+          |                                               |                |      records[0:6]: 0x0-0x186.7 (391)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             a4|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|53 0e 7b ce e0 70 4c 9d ce 13 70 17 97 2c 1b be|S.{..pL...p..,..|
+  0x000002|aa 81 43 ce a2 f1 7b 78 81 a8 37               |..C...{x..7     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 2c|              .,|              [0]: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" (0xc02c) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 fb 50 06 59 e7 73 56 26 64 95 d1 61 cc bf b4|..P.Y.sV&d..a...|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x12c.7 (54)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 31            |          .1    |          length: 49 0xfa-0xfb.7 (2)
+  0x00000f|                                    44 b9 9c 2c|            D..,|          encrypted_data: raw bits 0xfc-0x12c.7 (49)
+  0x000010|6e ab a3 dd 06 e9 fe 80 26 e4 81 04 a2 7a b4 0b|n.......&....z..|
+  *       |until 0x12c.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            eb e8 53 db bb 1a 13 e7 f5 d2 95 3b|    ..S........;|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x12d-0x161.7 (53)
+  0x000012|                                       17      |             .  |          type: "application_data" (23) (valid) 0x12d-0x12d.7 (1)
+  0x000012|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x12e-0x12f.7 (2)
+  0x000013|00 30                                          |.0              |          length: 48 0x130-0x131.7 (2)
+  0x000013|      44 b9 9c 2c 6e ab a3 de 43 f6 55 da b4 e0|  D..,n...C.U...|          encrypted_data: raw bits 0x132-0x161.7 (48)
+  0x000014|9f ba 09 fa 73 6f d6 8b 20 e0 32 97 ce e6 4c 25|....so.. .2...L%|
+  *       |until 0x161.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x162-0x186.7 (37)
+  0x000016|      15                                       |  .             |          type: "alert" (21) (valid) 0x162-0x162.7 (1)
+  0x000016|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x163-0x164.7 (2)
+  0x000016|               00 20                           |     .          |          length: 32 0x165-0x166.7 (2)
+  0x000016|                     44 b9 9c 2c 6e ab a3 df b1|       D..,n....|          encrypted_data: raw bits 0x167-0x186.7 (32)
+  0x000017|77 04 a2 a4 3a 9a 08 1d e6 51 ac a0 5f ab 74 a7|w...:....Q.._.t.|
+  0x000018|96 24 fe 62 fe e8 5e|                          |.$.b..^|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xd9a-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd9a-NA (0)
+          |                                               |                |    port: 4431 0xd9a-NA (0)
+          |                                               |                |    has_start: true 0xd9a-NA (0)
+          |                                               |                |    has_end: true 0xd9a-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd9a-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x7fa.7 (2043)
+          |                                               |                |      records[0:8]: 0x0-0x7fa.7 (2043)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             dc|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|11 d7 fd a7 9a 49 a5 16 e8 b7 25 ee 3f 45 3b 74|.....I....%.?E;t|
+  0x000002|30 7c 9a 84 d0 bd 55 7a 0e d9 92               |0|....Uz...     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 2c      |            .,  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" (0xc02c) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27e.7 (184)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b3            |          ..    |          length: 179 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27e.7 (179)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 af|             ...|            length: 175 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 66                     |       .f       |              length: 102 0x217-0x218.7 (2)
+  0x000021|                           30 64 02 30 56 1f b6|         0d.0V..|              data: raw bits 0x219-0x27e.7 (102)
+  0x000022|72 b6 15 d8 dc cb 95 90 ea 1d 5a c5 7f e2 df 12|r.........Z.....|
+  *       |until 0x27e.7 (102)                            |                |
+          |                                               |                |        [3]{}: record 0x27f-0x287.7 (9)
+  0x000027|                                             16|               .|          type: "handshake" (22) (valid) 0x27f-0x27f.7 (1)
+  0x000028|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x280-0x281.7 (2)
+  0x000028|      00 04                                    |  ..            |          length: 4 0x282-0x283.7 (2)
+          |                                               |                |          message{}: 0x284-0x287.7 (4)
+  0x000028|            0e                                 |    .           |            type: "server_hello_done" (14) 0x284-0x284.7 (1)
+  0x000028|               00 00 00                        |     ...        |            length: 0 0x285-0x287.7 (3)
+          |                                               |                |            data: raw bits 0x288-NA (0)
+          |                                               |                |        [4]{}: record 0x288-0x336.7 (175)
+  0x000028|                        16                     |        .       |          type: "handshake" (22) (valid) 0x288-0x288.7 (1)
+  0x000028|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x289-0x28a.7 (2)
+  0x000028|                                 00 aa         |           ..   |          length: 170 0x28b-0x28c.7 (2)
+          |                                               |                |          message{}: 0x28d-0x336.7 (170)
+  0x000028|                                       04      |             .  |            type: "new_session_ticket" (4) 0x28d-0x28d.7 (1)
+  0x000028|                                          00 00|              ..|            length: 166 0x28e-0x290.7 (3)
+  0x000029|a6                                             |.               |
+  0x000029|   00 00 01 2c                                 | ...,           |            lifetime_hint: 300 0x291-0x294.7 (4)
+  0x000029|               00 a0                           |     ..         |            ticket_length: 160 0x295-0x296.7 (2)
+  0x000029|                     6f 7d e1 6c 67 99 7a b0 7e|       o}.lg.z.~|            ticket: raw bits 0x297-0x336.7 (160)
+  0x00002a|f2 61 6e a4 37 9e 3d 27 85 63 23 04 13 78 26 0d|.an.7.='.c#..x&.|
+  *       |until 0x336.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x337-0x33c.7 (6)
+  0x000033|                     14                        |       .        |          type: "change_cipher_spec" (20) (valid) 0x337-0x337.7 (1)
+  0x000033|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x338-0x339.7 (2)
+  0x000033|                              00 01            |          ..    |          length: 1 0x33a-0x33b.7 (2)
+          |                                               |                |          message{}: 0x33c-0x33c.7 (1)
+  0x000033|                                    01         |            .   |            type: 1 0x33c-0x33c.7 (1)
+          |                                               |                |        [6]{}: record 0x33d-0x372.7 (54)
+  0x000033|                                       16      |             .  |          type: "handshake" (22) (valid) 0x33d-0x33d.7 (1)
+  0x000033|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x33e-0x33f.7 (2)
+  0x000034|00 31                                          |.1              |          length: 49 0x340-0x341.7 (2)
+  0x000034|      51 57 46 0f de 10 c4 d5 f6 0f c1 a5 1d b9|  QWF...........|          encrypted_data: raw bits 0x342-0x372.7 (49)
+  0x000035|a0 58 ac 40 eb 67 7b 98 ea 8c 38 52 52 d8 64 b2|.X.@.g{...8RR.d.|
+  *       |until 0x372.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            0b e4 1e 3d 48 e0 8f a0 2e ec b4 4f|    ...=H......O|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x373-0x7fa.7 (1160)
+  0x000037|         17                                    |   .            |          type: "application_data" (23) (valid) 0x373-0x373.7 (1)
+  0x000037|            03 03                              |    ..          |          version: "tls1.2" (0x303) (valid) 0x374-0x375.7 (2)
+  0x000037|                  04 83                        |      ..        |          length: 1155 0x376-0x377.7 (2)
+  0x000037|                        51 57 46 0f de 10 c4 d6|        QWF.....|          encrypted_data: raw bits 0x378-0x7fa.7 (1155)
+  0x000038|b6 40 aa 4f 78 24 c1 72 36 9d e6 e7 22 6d ed 4f|.@.Ox$.r6..."m.O|
+  *       |until 0x7fa.7 (end) (1155)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x115e.7 (4447)
+    *     |until 0x115e.7 (end) (4447)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x115e.7 (4447)
+    *     |until 0x115e.7 (end) (4447)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_RC4_128_SHA.pcap.fqtest

@@ -0,0 +1,518 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_RC4_128_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xd86-NA (0)
+          |                                               |                |  client{}: 0xd86-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd86-NA (0)
+          |                                               |                |    port: 42435 0xd86-NA (0)
+          |                                               |                |    has_start: true 0xd86-NA (0)
+          |                                               |                |    has_end: false 0xd86-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd86-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x17a.7 (379)
+          |                                               |                |      records[0:6]: 0x0-0x17a.7 (379)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             f2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|a5 03 6f 90 42 8c 9e 47 a0 4a 78 05 d5 aa 5a 92|..o.B..G.Jx...Z.|
+  0x000002|3e 7d b7 f2 c9 27 9d 21 e2 11 58               |>}...'.!..X     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 07|              ..|              [0]: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA" (0xc007) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 e5 12 cc 7a 20 41 20 30 c4 3b b3 26 39 f9 7a|....z A 0.;.&9.z|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x128.7 (50)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 2d            |          .-    |          length: 45 0xfa-0xfb.7 (2)
+  0x00000f|                                    46 84 2a e9|            F.*.|          encrypted_data: raw bits 0xfc-0x128.7 (45)
+  0x000010|a2 eb d2 87 88 a2 c2 a5 93 04 43 23 89 48 cb 92|..........C#.H..|
+  *       |until 0x128.7 (45)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            f4 ee 40 64 32 22 37 c1 0b c2 64 5d|    ..@d2"7...d]|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x129-0x159.7 (49)
+  0x000012|                           17                  |         .      |          type: "application_data" (23) (valid) 0x129-0x129.7 (1)
+  0x000012|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x12a-0x12b.7 (2)
+  0x000012|                                    00 2c      |            .,  |          length: 44 0x12c-0x12d.7 (2)
+  0x000012|                                          af 3d|              .=|          encrypted_data: raw bits 0x12e-0x159.7 (44)
+  0x000013|a9 a9 dc b2 da c0 ac 72 b9 ce 6c d7 21 7a 5b 5a|.......r..l.!z[Z|
+  *       |until 0x159.7 (44)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x15a-0x17a.7 (33)
+  0x000015|                              15               |          .     |          type: "alert" (21) (valid) 0x15a-0x15a.7 (1)
+  0x000015|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x15b-0x15c.7 (2)
+  0x000015|                                       00 1c   |             .. |          length: 28 0x15d-0x15e.7 (2)
+  0x000015|                                             2f|               /|          encrypted_data: raw bits 0x15f-0x17a.7 (28)
+  0x000016|3c 8c 30 d8 36 a1 bb 61 d3 96 f5 d9 39 0b 80 28|<.0.6..a....9..(|
+  0x000017|c0 3f 29 e5 83 d7 57 d8 58 c3 62|              |.?)...W.X.b|    |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xd86-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xd86-NA (0)
+          |                                               |                |    port: 4431 0xd86-NA (0)
+          |                                               |                |    has_start: true 0xd86-NA (0)
+          |                                               |                |    has_end: true 0xd86-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xd86-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x7f2.7 (2035)
+          |                                               |                |      records[0:8]: 0x0-0x7f2.7 (2035)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             44|               D|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|f5 cd d9 25 11 e3 19 0e 08 87 d3 f9 eb 80 eb 6b|...%...........k|
+  0x000002|c6 0b a4 86 98 7b 93 37 55 28 14               |.....{.7U(.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 07      |            ..  |            cipher_suit: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA" (0xc007) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x1c6.7 (384)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 7b            |          .{    |          length: 379 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x1c6.7 (379)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 77|             ..w|            length: 375 0x4d-0x4f.7 (3)
+  0x000005|00 01 74                                       |..t             |            certificates_length: 372 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x1c6.7 (372)
+          |                                               |                |              [0]{}: certificate 0x53-0x1c6.7 (372)
+  0x000005|         00 01 71                              |   ..q          |                length: 369 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x1c6.7 (369)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 6d                  |       ..m      |                  length: 365 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x1c6.7 (365)
+          |                                               |                |                    [0]{}: object 0x5a-0x150.7 (247)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 81 f4         |           ..   |                      length: 244 0x5b-0x5c.7 (2)
+          |                                               |                |                      constructed[0:6]: 0x5d-0x150.7 (244)
+          |                                               |                |                        [0]{}: object 0x5d-0x67.7 (11)
+  0x000005|                                       02      |             .  |                          class: "universal" (0) 0x5d-0x5d.1 (0.2)
+  0x000005|                                       02      |             .  |                          form: "primitive" (0) 0x5d.2-0x5d.2 (0.1)
+  0x000005|                                       02      |             .  |                          tag: "integer" (0x2) 0x5d.3-0x5d.7 (0.5)
+  0x000005|                                          09   |              . |                          length: 9 0x5e-0x5e.7 (1)
+  0x000005|                                             00|               .|                          value: 15139635147801862390 0x5f-0x67.7 (9)
+  0x000006|d2 1a c9 f4 25 bf a0 f6                        |....%...        |
+          |                                               |                |                        [1]{}: object 0x68-0x72.7 (11)
+  0x000006|                        30                     |        0       |                          class: "universal" (0) 0x68-0x68.1 (0.2)
+  0x000006|                        30                     |        0       |                          form: "constructed" (1) 0x68.2-0x68.2 (0.1)
+  0x000006|                        30                     |        0       |                          tag: "sequence" (0x10) 0x68.3-0x68.7 (0.5)
+  0x000006|                           09                  |         .      |                          length: 9 0x69-0x69.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x6a-0x72.7 (9)
+          |                                               |                |                            [0]{}: object 0x6a-0x72.7 (9)
+  0x000006|                              06               |          .     |                              class: "universal" (0) 0x6a-0x6a.1 (0.2)
+  0x000006|                              06               |          .     |                              form: "primitive" (0) 0x6a.2-0x6a.2 (0.1)
+  0x000006|                              06               |          .     |                              tag: "object_identifier" (0x6) 0x6a.3-0x6a.7 (0.5)
+  0x000006|                                 07            |           .    |                              length: 7 0x6b-0x6b.7 (1)
+          |                                               |                |                              value[0:6]: 0x6c-0x72.7 (7)
+  0x000006|                                    2a         |            *   |                                [0]: 1 oid 0x6c-0x6c.7 (1)
+  0x000006|                                    2a         |            *   |                                [1]: 2 oid 0x6c-0x6c.7 (1)
+  0x000006|                                       86 48   |             .H |                                [2]: 840 oid 0x6d-0x6e.7 (2)
+  0x000006|                                             ce|               .|                                [3]: 10045 oid 0x6f-0x70.7 (2)
+  0x000007|3d                                             |=               |
+  0x000007|   04                                          | .              |                                [4]: 4 oid 0x71-0x71.7 (1)
+  0x000007|      01                                       |  .             |                                [5]: 1 oid 0x72-0x72.7 (1)
+          |                                               |                |                        [2]{}: object 0x73-0x95.7 (35)
+  0x000007|         30                                    |   0            |                          class: "universal" (0) 0x73-0x73.1 (0.2)
+  0x000007|         30                                    |   0            |                          form: "constructed" (1) 0x73.2-0x73.2 (0.1)
+  0x000007|         30                                    |   0            |                          tag: "sequence" (0x10) 0x73.3-0x73.7 (0.5)
+  0x000007|            21                                 |    !           |                          length: 33 0x74-0x74.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x75-0x95.7 (33)
+          |                                               |                |                            [0]{}: object 0x75-0x95.7 (33)
+  0x000007|               31                              |     1          |                              class: "universal" (0) 0x75-0x75.1 (0.2)
+  0x000007|               31                              |     1          |                              form: "constructed" (1) 0x75.2-0x75.2 (0.1)
+  0x000007|               31                              |     1          |                              tag: "set" (0x11) 0x75.3-0x75.7 (0.5)
+  0x000007|                  1f                           |      .         |                              length: 31 0x76-0x76.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x77-0x95.7 (31)
+          |                                               |                |                                [0]{}: object 0x77-0x95.7 (31)
+  0x000007|                     30                        |       0        |                                  class: "universal" (0) 0x77-0x77.1 (0.2)
+  0x000007|                     30                        |       0        |                                  form: "constructed" (1) 0x77.2-0x77.2 (0.1)
+  0x000007|                     30                        |       0        |                                  tag: "sequence" (0x10) 0x77.3-0x77.7 (0.5)
+  0x000007|                        1d                     |        .       |                                  length: 29 0x78-0x78.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x79-0x95.7 (29)
+          |                                               |                |                                    [0]{}: object 0x79-0x7d.7 (5)
+  0x000007|                           06                  |         .      |                                      class: "universal" (0) 0x79-0x79.1 (0.2)
+  0x000007|                           06                  |         .      |                                      form: "primitive" (0) 0x79.2-0x79.2 (0.1)
+  0x000007|                           06                  |         .      |                                      tag: "object_identifier" (0x6) 0x79.3-0x79.7 (0.5)
+  0x000007|                              03               |          .     |                                      length: 3 0x7a-0x7a.7 (1)
+          |                                               |                |                                      value[0:4]: 0x7b-0x7d.7 (3)
+  0x000007|                                 55            |           U    |                                        [0]: 2 oid 0x7b-0x7b.7 (1)
+  0x000007|                                 55            |           U    |                                        [1]: 5 oid 0x7b-0x7b.7 (1)
+  0x000007|                                    04         |            .   |                                        [2]: 4 oid 0x7c-0x7c.7 (1)
+  0x000007|                                       03      |             .  |                                        [3]: 3 oid 0x7d-0x7d.7 (1)
+          |                                               |                |                                    [1]{}: object 0x7e-0x95.7 (24)
+  0x000007|                                          0c   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          0c   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          0c   |              . |                                      tag: "utf8_string" (0xc) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             16|               .|                                      length: 22 0x7f-0x7f.7 (1)
+  0x000008|54 65 73 74 20 43 65 72 74 69 66 69 63 61 74 65|Test Certificate|                                      value: "Test Certificate ECDSA" 0x80-0x95.7 (22)
+  0x000009|20 45 43 44 53 41                              | ECDSA          |
+          |                                               |                |                        [3]{}: object 0x96-0xb5.7 (32)
+  0x000009|                  30                           |      0         |                          class: "universal" (0) 0x96-0x96.1 (0.2)
+  0x000009|                  30                           |      0         |                          form: "constructed" (1) 0x96.2-0x96.2 (0.1)
+  0x000009|                  30                           |      0         |                          tag: "sequence" (0x10) 0x96.3-0x96.7 (0.5)
+  0x000009|                     1e                        |       .        |                          length: 30 0x97-0x97.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x98-0xb5.7 (30)
+          |                                               |                |                            [0]{}: object 0x98-0xa6.7 (15)
+  0x000009|                        17                     |        .       |                              class: "universal" (0) 0x98-0x98.1 (0.2)
+  0x000009|                        17                     |        .       |                              form: "primitive" (0) 0x98.2-0x98.2 (0.1)
+  0x000009|                        17                     |        .       |                              tag: "utc_time" (0x17) 0x98.3-0x98.7 (0.5)
+  0x000009|                           0d                  |         .      |                              length: 13 0x99-0x99.7 (1)
+  0x000009|                              31 33 30 39 31 35|          130915|                              value: "130915215110Z" 0x9a-0xa6.7 (13)
+  0x00000a|32 31 35 31 31 30 5a                           |215110Z         |
+          |                                               |                |                            [1]{}: object 0xa7-0xb5.7 (15)
+  0x00000a|                     17                        |       .        |                              class: "universal" (0) 0xa7-0xa7.1 (0.2)
+  0x00000a|                     17                        |       .        |                              form: "primitive" (0) 0xa7.2-0xa7.2 (0.1)
+  0x00000a|                     17                        |       .        |                              tag: "utc_time" (0x17) 0xa7.3-0xa7.7 (0.5)
+  0x00000a|                        0d                     |        .       |                              length: 13 0xa8-0xa8.7 (1)
+  0x00000a|                           32 33 30 39 31 33 32|         2309132|                              value: "230913215110Z" 0xa9-0xb5.7 (13)
+  0x00000b|31 35 31 31 30 5a                              |15110Z          |
+          |                                               |                |                        [4]{}: object 0xb6-0xd8.7 (35)
+  0x00000b|                  30                           |      0         |                          class: "universal" (0) 0xb6-0xb6.1 (0.2)
+  0x00000b|                  30                           |      0         |                          form: "constructed" (1) 0xb6.2-0xb6.2 (0.1)
+  0x00000b|                  30                           |      0         |                          tag: "sequence" (0x10) 0xb6.3-0xb6.7 (0.5)
+  0x00000b|                     21                        |       !        |                          length: 33 0xb7-0xb7.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xb8-0xd8.7 (33)
+          |                                               |                |                            [0]{}: object 0xb8-0xd8.7 (33)
+  0x00000b|                        31                     |        1       |                              class: "universal" (0) 0xb8-0xb8.1 (0.2)
+  0x00000b|                        31                     |        1       |                              form: "constructed" (1) 0xb8.2-0xb8.2 (0.1)
+  0x00000b|                        31                     |        1       |                              tag: "set" (0x11) 0xb8.3-0xb8.7 (0.5)
+  0x00000b|                           1f                  |         .      |                              length: 31 0xb9-0xb9.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xba-0xd8.7 (31)
+          |                                               |                |                                [0]{}: object 0xba-0xd8.7 (31)
+  0x00000b|                              30               |          0     |                                  class: "universal" (0) 0xba-0xba.1 (0.2)
+  0x00000b|                              30               |          0     |                                  form: "constructed" (1) 0xba.2-0xba.2 (0.1)
+  0x00000b|                              30               |          0     |                                  tag: "sequence" (0x10) 0xba.3-0xba.7 (0.5)
+  0x00000b|                                 1d            |           .    |                                  length: 29 0xbb-0xbb.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbc-0xd8.7 (29)
+          |                                               |                |                                    [0]{}: object 0xbc-0xc0.7 (5)
+  0x00000b|                                    06         |            .   |                                      class: "universal" (0) 0xbc-0xbc.1 (0.2)
+  0x00000b|                                    06         |            .   |                                      form: "primitive" (0) 0xbc.2-0xbc.2 (0.1)
+  0x00000b|                                    06         |            .   |                                      tag: "object_identifier" (0x6) 0xbc.3-0xbc.7 (0.5)
+  0x00000b|                                       03      |             .  |                                      length: 3 0xbd-0xbd.7 (1)
+          |                                               |                |                                      value[0:4]: 0xbe-0xc0.7 (3)
+  0x00000b|                                          55   |              U |                                        [0]: 2 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                          55   |              U |                                        [1]: 5 oid 0xbe-0xbe.7 (1)
+  0x00000b|                                             04|               .|                                        [2]: 4 oid 0xbf-0xbf.7 (1)
+  0x00000c|03                                             |.               |                                        [3]: 3 oid 0xc0-0xc0.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc1-0xd8.7 (24)
+  0x00000c|   0c                                          | .              |                                      class: "universal" (0) 0xc1-0xc1.1 (0.2)
+  0x00000c|   0c                                          | .              |                                      form: "primitive" (0) 0xc1.2-0xc1.2 (0.1)
+  0x00000c|   0c                                          | .              |                                      tag: "utf8_string" (0xc) 0xc1.3-0xc1.7 (0.5)
+  0x00000c|      16                                       |  .             |                                      length: 22 0xc2-0xc2.7 (1)
+  0x00000c|         54 65 73 74 20 43 65 72 74 69 66 69 63|   Test Certific|                                      value: "Test Certificate ECDSA" 0xc3-0xd8.7 (22)
+  0x00000d|61 74 65 20 45 43 44 53 41                     |ate ECDSA       |
+          |                                               |                |                        [5]{}: object 0xd9-0x150.7 (120)
+  0x00000d|                           30                  |         0      |                          class: "universal" (0) 0xd9-0xd9.1 (0.2)
+  0x00000d|                           30                  |         0      |                          form: "constructed" (1) 0xd9.2-0xd9.2 (0.1)
+  0x00000d|                           30                  |         0      |                          tag: "sequence" (0x10) 0xd9.3-0xd9.7 (0.5)
+  0x00000d|                              76               |          v     |                          length: 118 0xda-0xda.7 (1)
+          |                                               |                |                          constructed[0:2]: 0xdb-0x150.7 (118)
+          |                                               |                |                            [0]{}: object 0xdb-0xec.7 (18)
+  0x00000d|                                 30            |           0    |                              class: "universal" (0) 0xdb-0xdb.1 (0.2)
+  0x00000d|                                 30            |           0    |                              form: "constructed" (1) 0xdb.2-0xdb.2 (0.1)
+  0x00000d|                                 30            |           0    |                              tag: "sequence" (0x10) 0xdb.3-0xdb.7 (0.5)
+  0x00000d|                                    10         |            .   |                              length: 16 0xdc-0xdc.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdd-0xec.7 (16)
+          |                                               |                |                                [0]{}: object 0xdd-0xe5.7 (9)
+  0x00000d|                                       06      |             .  |                                  class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       06      |             .  |                                  form: "primitive" (0) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       06      |             .  |                                  tag: "object_identifier" (0x6) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          07   |              . |                                  length: 7 0xde-0xde.7 (1)
+          |                                               |                |                                  value[0:6]: 0xdf-0xe5.7 (7)
+  0x00000d|                                             2a|               *|                                    [0]: 1 oid 0xdf-0xdf.7 (1)
+  0x00000d|                                             2a|               *|                                    [1]: 2 oid 0xdf-0xdf.7 (1)
+  0x00000e|86 48                                          |.H              |                                    [2]: 840 oid 0xe0-0xe1.7 (2)
+  0x00000e|      ce 3d                                    |  .=            |                                    [3]: 10045 oid 0xe2-0xe3.7 (2)
+  0x00000e|            02                                 |    .           |                                    [4]: 2 oid 0xe4-0xe4.7 (1)
+  0x00000e|               01                              |     .          |                                    [5]: 1 oid 0xe5-0xe5.7 (1)
+          |                                               |                |                                [1]{}: object 0xe6-0xec.7 (7)
+  0x00000e|                  06                           |      .         |                                  class: "universal" (0) 0xe6-0xe6.1 (0.2)
+  0x00000e|                  06                           |      .         |                                  form: "primitive" (0) 0xe6.2-0xe6.2 (0.1)
+  0x00000e|                  06                           |      .         |                                  tag: "object_identifier" (0x6) 0xe6.3-0xe6.7 (0.5)
+  0x00000e|                     05                        |       .        |                                  length: 5 0xe7-0xe7.7 (1)
+          |                                               |                |                                  value[0:5]: 0xe8-0xec.7 (5)
+  0x00000e|                        2b                     |        +       |                                    [0]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                        2b                     |        +       |                                    [1]: 3 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           81 04               |         ..     |                                    [2]: 132 oid 0xe9-0xea.7 (2)
+  0x00000e|                                 00            |           .    |                                    [3]: 0 oid 0xeb-0xeb.7 (1)
+  0x00000e|                                    22         |            "   |                                    [4]: 34 oid 0xec-0xec.7 (1)
+          |                                               |                |                            [1]{}: object 0xed-0x150.7 (100)
+  0x00000e|                                       03      |             .  |                              class: "universal" (0) 0xed-0xed.1 (0.2)
+  0x00000e|                                       03      |             .  |                              form: "primitive" (0) 0xed.2-0xed.2 (0.1)
+  0x00000e|                                       03      |             .  |                              tag: "bit_string" (0x3) 0xed.3-0xed.7 (0.5)
+  0x00000e|                                          62   |              b |                              length: 98 0xee-0xee.7 (1)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|04 a8 82 d1 a7 4e 97 73 1c 4a e2 3e f7 e9 ae c2|.....N.s.J.>....|                              value: raw bits 0xf0-0x150.7 (97)
+  *       |until 0x150.7 (97)                             |                |
+          |                                               |                |                    [1]{}: object 0x151-0x15b.7 (11)
+  0x000015|   30                                          | 0              |                      class: "universal" (0) 0x151-0x151.1 (0.2)
+  0x000015|   30                                          | 0              |                      form: "constructed" (1) 0x151.2-0x151.2 (0.1)
+  0x000015|   30                                          | 0              |                      tag: "sequence" (0x10) 0x151.3-0x151.7 (0.5)
+  0x000015|      09                                       |  .             |                      length: 9 0x152-0x152.7 (1)
+          |                                               |                |                      constructed[0:1]: 0x153-0x15b.7 (9)
+          |                                               |                |                        [0]{}: object 0x153-0x15b.7 (9)
+  0x000015|         06                                    |   .            |                          class: "universal" (0) 0x153-0x153.1 (0.2)
+  0x000015|         06                                    |   .            |                          form: "primitive" (0) 0x153.2-0x153.2 (0.1)
+  0x000015|         06                                    |   .            |                          tag: "object_identifier" (0x6) 0x153.3-0x153.7 (0.5)
+  0x000015|            07                                 |    .           |                          length: 7 0x154-0x154.7 (1)
+          |                                               |                |                          value[0:6]: 0x155-0x15b.7 (7)
+  0x000015|               2a                              |     *          |                            [0]: 1 oid 0x155-0x155.7 (1)
+  0x000015|               2a                              |     *          |                            [1]: 2 oid 0x155-0x155.7 (1)
+  0x000015|                  86 48                        |      .H        |                            [2]: 840 oid 0x156-0x157.7 (2)
+  0x000015|                        ce 3d                  |        .=      |                            [3]: 10045 oid 0x158-0x159.7 (2)
+  0x000015|                              04               |          .     |                            [4]: 4 oid 0x15a-0x15a.7 (1)
+  0x000015|                                 01            |           .    |                            [5]: 1 oid 0x15b-0x15b.7 (1)
+          |                                               |                |                    [2]{}: object 0x15c-0x1c6.7 (107)
+  0x000015|                                    03         |            .   |                      class: "universal" (0) 0x15c-0x15c.1 (0.2)
+  0x000015|                                    03         |            .   |                      form: "primitive" (0) 0x15c.2-0x15c.2 (0.1)
+  0x000015|                                    03         |            .   |                      tag: "bit_string" (0x3) 0x15c.3-0x15c.7 (0.5)
+  0x000015|                                       69      |             i  |                      length: 105 0x15d-0x15d.7 (1)
+  0x000015|                                          00   |              . |                      unused_bits_count: 0 0x15e-0x15e.7 (1)
+  0x000015|                                             30|               0|                      value: raw bits 0x15f-0x1c6.7 (104)
+  0x000016|66 02 31 00 c7 67 eb 3d 15 47 89 d0 26 f4 5f 89|f.1..g.=.G..&._.|
+  *       |until 0x1c6.7 (104)                            |                |
+          |                                               |                |        [2]{}: record 0x1c7-0x27e.7 (184)
+  0x00001c|                     16                        |       .        |          type: "handshake" (22) (valid) 0x1c7-0x1c7.7 (1)
+  0x00001c|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x1c8-0x1c9.7 (2)
+  0x00001c|                              00 b3            |          ..    |          length: 179 0x1ca-0x1cb.7 (2)
+          |                                               |                |          message{}: 0x1cc-0x27e.7 (179)
+  0x00001c|                                    0c         |            .   |            type: "server_key_exchange" (12) 0x1cc-0x1cc.7 (1)
+  0x00001c|                                       00 00 af|             ...|            length: 175 0x1cd-0x1cf.7 (3)
+          |                                               |                |            curve_params{}: 0x1d0-NA (0)
+  0x00001d|03                                             |.               |              curve_type: 3 0x1d0-0x1d0.7 (1)
+  0x00001d|   00 17                                       | ..             |              named_curve: 23 0x1d1-0x1d2.7 (2)
+          |                                               |                |            public{}: 0x1d3-NA (0)
+  0x00001d|         41                                    |   A            |              length: 65 0x1d3-0x1d3.7 (1)
+  0x00001d|            04 34 e1 a2 85 ef 39 47 4b 97 2b e9|    .4....9GK.+.|              data: raw bits 0x1d4-0x214.7 (65)
+  0x00001e|9d e3 c7 4c 70 31 95 87 36 67 64 8d a9 b2 4a d8|...Lp1..6gd...J.|
+  *       |until 0x214.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x215-NA (0)
+  0x000021|               06                              |     .          |              hash: "sha512" (6) 0x215-0x215.7 (1)
+  0x000021|                  03                           |      .         |              signature: "ecdsa" (3) 0x216-0x216.7 (1)
+  0x000021|                     00 66                     |       .f       |              length: 102 0x217-0x218.7 (2)
+  0x000021|                           30 64 02 30 6d bb c9|         0d.0m..|              data: raw bits 0x219-0x27e.7 (102)
+  0x000022|99 48 1e 30 be 74 0b 3a 19 1e c0 c7 ea 41 08 26|.H.0.t.:.....A.&|
+  *       |until 0x27e.7 (102)                            |                |
+          |                                               |                |        [3]{}: record 0x27f-0x287.7 (9)
+  0x000027|                                             16|               .|          type: "handshake" (22) (valid) 0x27f-0x27f.7 (1)
+  0x000028|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x280-0x281.7 (2)
+  0x000028|      00 04                                    |  ..            |          length: 4 0x282-0x283.7 (2)
+          |                                               |                |          message{}: 0x284-0x287.7 (4)
+  0x000028|            0e                                 |    .           |            type: "server_hello_done" (14) 0x284-0x284.7 (1)
+  0x000028|               00 00 00                        |     ...        |            length: 0 0x285-0x287.7 (3)
+          |                                               |                |            data: raw bits 0x288-NA (0)
+          |                                               |                |        [4]{}: record 0x288-0x336.7 (175)
+  0x000028|                        16                     |        .       |          type: "handshake" (22) (valid) 0x288-0x288.7 (1)
+  0x000028|                           03 03               |         ..     |          version: "tls1.2" (0x303) (valid) 0x289-0x28a.7 (2)
+  0x000028|                                 00 aa         |           ..   |          length: 170 0x28b-0x28c.7 (2)
+          |                                               |                |          message{}: 0x28d-0x336.7 (170)
+  0x000028|                                       04      |             .  |            type: "new_session_ticket" (4) 0x28d-0x28d.7 (1)
+  0x000028|                                          00 00|              ..|            length: 166 0x28e-0x290.7 (3)
+  0x000029|a6                                             |.               |
+  0x000029|   00 00 01 2c                                 | ...,           |            lifetime_hint: 300 0x291-0x294.7 (4)
+  0x000029|               00 a0                           |     ..         |            ticket_length: 160 0x295-0x296.7 (2)
+  0x000029|                     6f 7d e1 6c 67 99 7a b0 7e|       o}.lg.z.~|            ticket: raw bits 0x297-0x336.7 (160)
+  0x00002a|f2 61 6e a4 37 9e 3d 86 0d 19 28 83 37 ae 3d 68|.an.7.=...(.7.=h|
+  *       |until 0x336.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x337-0x33c.7 (6)
+  0x000033|                     14                        |       .        |          type: "change_cipher_spec" (20) (valid) 0x337-0x337.7 (1)
+  0x000033|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x338-0x339.7 (2)
+  0x000033|                              00 01            |          ..    |          length: 1 0x33a-0x33b.7 (2)
+          |                                               |                |          message{}: 0x33c-0x33c.7 (1)
+  0x000033|                                    01         |            .   |            type: 1 0x33c-0x33c.7 (1)
+          |                                               |                |        [6]{}: record 0x33d-0x36e.7 (50)
+  0x000033|                                       16      |             .  |          type: "handshake" (22) (valid) 0x33d-0x33d.7 (1)
+  0x000033|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x33e-0x33f.7 (2)
+  0x000034|00 2d                                          |.-              |          length: 45 0x340-0x341.7 (2)
+  0x000034|      07 d7 af c2 d4 6c bb 53 03 2c 01 b5 9e 68|  .....l.S.,...h|          encrypted_data: raw bits 0x342-0x36e.7 (45)
+  0x000035|b8 91 09 01 47 53 e6 8d 6d 74 53 7a ed 01 78 6f|....GS..mtSz..xo|
+  0x000036|7b 71 bb 4c 6c 92 4f ba 3e b0 c9 14 3a 19 a8   |{q.Ll.O.>...:.. |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ee 3a bf bb ed 88 6e 04 a5 e7 08 b9|    .:....n.....|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x36f-0x7f2.7 (1156)
+  0x000036|                                             17|               .|          type: "application_data" (23) (valid) 0x36f-0x36f.7 (1)
+  0x000037|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x370-0x371.7 (2)
+  0x000037|      04 7f                                    |  ..            |          length: 1151 0x372-0x373.7 (2)
+  0x000037|            96 37 c3 45 f3 c9 62 db c8 b5 7e 7f|    .7.E..b...~.|          encrypted_data: raw bits 0x374-0x7f2.7 (1151)
+  0x000038|02 fe 03 19 47 fe 53 1f b6 89 04 21 1b eb 4e f3|....G.S....!..N.|
+  *       |until 0x7f2.7 (end) (1151)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1140.7 (4417)
+    *     |until 0x1140.7 (end) (4417)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1140.7 (4417)
+    *     |until 0x1140.7 (end) (4417)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest

@@ -0,0 +1,527 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe1f-NA (0)
+          |                                               |                |  client{}: 0xe1f-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe1f-NA (0)
+          |                                               |                |    port: 38988 0xe1f-NA (0)
+          |                                               |                |    has_start: true 0xe1f-NA (0)
+          |                                               |                |    has_end: false 0xe1f-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe1f-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x19d.7 (414)
+          |                                               |                |      records[0:6]: 0x0-0x19d.7 (414)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             c3|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|6a 0c 24 59 17 0e c5 0e c7 83 37 8f 88 12 5b 20|j.$Y......7...[ |
+  0x000002|3a e3 c7 33 3e 6a 0e 62 44 05 3c               |:..3>j.bD.<     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 12|              ..|              [0]: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" (0xc012) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 fc 60 49 0b 27 b5 aa 9f 94 d9 79 01 2e 27 f1|..`I.'.....y..'.|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x133.7 (61)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 38            |          .8    |          length: 56 0xfa-0xfb.7 (2)
+  0x00000f|                                    12 ba cc 4a|            ...J|          encrypted_data: raw bits 0xfc-0x133.7 (56)
+  0x000010|ca b3 ab d2 51 68 57 1a 2a 47 13 f3 ab 67 ba 3a|....QhW.*G...g.:|
+  *       |until 0x133.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            c3 08 23 4f f3 8a 7b 6a e9 8e e3 8c|    ..#O..{j....|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x134-0x170.7 (61)
+  0x000013|            17                                 |    .           |          type: "application_data" (23) (valid) 0x134-0x134.7 (1)
+  0x000013|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x135-0x136.7 (2)
+  0x000013|                     00 38                     |       .8       |          length: 56 0x137-0x138.7 (2)
+  0x000013|                           dc a3 05 d1 36 8f 16|         ....6..|          encrypted_data: raw bits 0x139-0x170.7 (56)
+  0x000014|25 ba 61 e8 aa 9c 81 11 44 4e f3 71 1d ff 3f cb|%.a.....DN.q..?.|
+  *       |until 0x170.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x171-0x19d.7 (45)
+  0x000017|   15                                          | .              |          type: "alert" (21) (valid) 0x171-0x171.7 (1)
+  0x000017|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x172-0x173.7 (2)
+  0x000017|            00 28                              |    .(          |          length: 40 0x174-0x175.7 (2)
+  0x000017|                  15 12 06 de a9 32 e6 53 c7 81|      .....2.S..|          encrypted_data: raw bits 0x176-0x19d.7 (40)
+  0x000018|dd ad d3 62 7c 13 ec 54 4f 99 d9 20 d1 26 4b fd|...b|..TO.. .&K.|
+  0x000019|4d 1f ff 89 9b b9 65 6b 25 03 5f 25 ed 59|     |M.....ek%._%.Y| |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe1f-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe1f-NA (0)
+          |                                               |                |    port: 4430 0xe1f-NA (0)
+          |                                               |                |    has_start: true 0xe1f-NA (0)
+          |                                               |                |    has_end: true 0xe1f-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe1f-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x868.7 (2153)
+          |                                               |                |      records[0:8]: 0x0-0x868.7 (2153)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             c5|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|d9 82 c1 53 94 f4 bb 6e 83 ff b5 1c aa d5 aa cd|...S...n........|
+  0x000002|4a 69 ba ee 31 ed ff b2 df 89 90               |Ji..1......     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 12      |            ..  |            cipher_suit: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA" (0xc012) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   89 93 8b ae fd 84 b6 1c 95 f8 6d 7e 6b 1d 23| ..........m~k.#|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|22 dc 50 47 cf 38 5d a6 e0 42 ea 15 ff 30 2f 52|".PG.8]..B...0/R|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 0d 29 7f 94 e8 66 50|.z(....~1.)...fP|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3db.7 (61)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 38                                    |  .8            |          length: 56 0x3a2-0x3a3.7 (2)
+  0x00003a|            04 c8 4f 39 dd 9a 97 90 0b 5b 9c 2a|    ..O9.....[.*|          encrypted_data: raw bits 0x3a4-0x3db.7 (56)
+  0x00003b|c5 47 1a 24 1c 54 79 0f 77 6f e8 11 43 2f 8e de|.G.$.Ty.wo..C/..|
+  *       |until 0x3db.7 (56)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            37 79 61 4a 11 01 7f 63 89 5a 1e 3b|    7yaJ...c.Z.;|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3dc-0x868.7 (1165)
+  0x00003d|                                    17         |            .   |          type: "application_data" (23) (valid) 0x3dc-0x3dc.7 (1)
+  0x00003d|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x3dd-0x3de.7 (2)
+  0x00003d|                                             04|               .|          length: 1160 0x3df-0x3e0.7 (2)
+  0x00003e|88                                             |.               |
+  0x00003e|   70 81 24 17 cb 2a 19 18 04 6b 89 13 ae 1f e8| p.$..*...k.....|          encrypted_data: raw bits 0x3e1-0x868.7 (1160)
+  0x00003f|8f b4 be 91 0a 7c 9e 6e 2f 1d f1 eb e9 3a 78 dd|.....|.n/....:x.|
+  *       |until 0x868.7 (end) (1160)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113b.7 (4412)
+    *     |until 0x113b.7 (end) (4412)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113b.7 (4412)
+    *     |until 0x113b.7 (end) (4412)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest

@@ -0,0 +1,527 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe47-NA (0)
+          |                                               |                |  client{}: 0xe47-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe47-NA (0)
+          |                                               |                |    port: 38999 0xe47-NA (0)
+          |                                               |                |    has_start: true 0xe47-NA (0)
+          |                                               |                |    has_end: false 0xe47-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe47-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1b5.7 (438)
+          |                                               |                |      records[0:6]: 0x0-0x1b5.7 (438)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             9f|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|dd 9f be 08 b5 a2 d4 33 b2 db 2c 39 ce 7a 1c 8d|.......3..,9.z..|
+  0x000002|7c 6c fc 89 b2 eb bb 40 e3 be 89               ||l.....@...     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 13|              ..|              [0]: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" (0xc013) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 82 4a d2 1d 56 fa 7a a5 ff 2c f2 99 c2 ca 1d|..J..V.z..,.....|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x13b.7 (69)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 40            |          .@    |          length: 64 0xfa-0xfb.7 (2)
+  0x00000f|                                    cb 64 39 c5|            .d9.|          encrypted_data: raw bits 0xfc-0x13b.7 (64)
+  0x000010|6c 74 7d 68 da cb b6 95 01 54 45 36 9b 3e 5a ea|lt}h.....TE6.>Z.|
+  *       |until 0x13b.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            13 26 4e e0 6e 08 17 f2 37 99 3f f0|    .&N.n...7.?.|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x13c-0x180.7 (69)
+  0x000013|                                    17         |            .   |          type: "application_data" (23) (valid) 0x13c-0x13c.7 (1)
+  0x000013|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x13d-0x13e.7 (2)
+  0x000013|                                             00|               .|          length: 64 0x13f-0x140.7 (2)
+  0x000014|40                                             |@               |
+  0x000014|   b5 5f a7 fb 19 25 ed c0 f3 e4 ac e4 98 5b 51| ._...%.......[Q|          encrypted_data: raw bits 0x141-0x180.7 (64)
+  0x000015|35 6d fb ca 0c a6 18 d5 cc b8 e3 26 d2 66 e3 52|5m.........&.f.R|
+  *       |until 0x180.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x181-0x1b5.7 (53)
+  0x000018|   15                                          | .              |          type: "alert" (21) (valid) 0x181-0x181.7 (1)
+  0x000018|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x182-0x183.7 (2)
+  0x000018|            00 30                              |    .0          |          length: 48 0x184-0x185.7 (2)
+  0x000018|                  03 c0 b3 54 8f 71 68 2f 6b 2f|      ...T.qh/k/|          encrypted_data: raw bits 0x186-0x1b5.7 (48)
+  0x000019|62 f4 24 5f 24 1b 51 8c 81 ab 4c cd 26 ee 0e cf|b.$_$.Q...L.&...|
+  *       |until 0x1b5.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe47-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe47-NA (0)
+          |                                               |                |    port: 4430 0xe47-NA (0)
+          |                                               |                |    has_start: true 0xe47-NA (0)
+          |                                               |                |    has_end: true 0xe47-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe47-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x878.7 (2169)
+          |                                               |                |      records[0:8]: 0x0-0x878.7 (2169)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             d2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ee 1c cb 85 e5 2b 70 a0 88 9c 3e 4d 16 1e 7f 1e|.....+p...>M....|
+  0x000002|2f 65 bc e5 e2 f8 12 0a 71 41 87               |/e......qA.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 13      |            ..  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" (0xc013) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   72 90 20 0c 08 ca 65 08 59 16 02 7f 9a 98 41| r. ...e.Y.....A|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|53 db 1a 21 2e d8 f3 62 19 a5 34 b9 b4 72 a0 fb|S..!...b..4..r..|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 3a 66 5d ac b0 c6 46|.z(....~1:f]...F|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3e3.7 (69)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 40                                    |  .@            |          length: 64 0x3a2-0x3a3.7 (2)
+  0x00003a|            7e a0 bc 6e 57 39 87 95 a5 c4 e0 84|    ~..nW9......|          encrypted_data: raw bits 0x3a4-0x3e3.7 (64)
+  0x00003b|e1 9e 89 2f 39 5b 7b c3 c2 ed bf 5c a5 7d c3 06|.../9[{....\.}..|
+  *       |until 0x3e3.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            e4 e0 1a be 35 c7 4e b3 23 e6 1e 9b|    ....5.N.#...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3e4-0x878.7 (1173)
+  0x00003e|            17                                 |    .           |          type: "application_data" (23) (valid) 0x3e4-0x3e4.7 (1)
+  0x00003e|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x3e5-0x3e6.7 (2)
+  0x00003e|                     04 90                     |       ..       |          length: 1168 0x3e7-0x3e8.7 (2)
+  0x00003e|                           d4 9a b8 6d 0e 14 64|         ...m..d|          encrypted_data: raw bits 0x3e9-0x878.7 (1168)
+  0x00003f|87 7b 8e 73 ea f0 b4 2f b4 9b 94 bf 3a 20 b1 6b|.{.s.../....: .k|
+  *       |until 0x878.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest

@@ -0,0 +1,527 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe97-NA (0)
+          |                                               |                |  client{}: 0xe97-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe97-NA (0)
+          |                                               |                |    port: 38997 0xe97-NA (0)
+          |                                               |                |    has_start: true 0xe97-NA (0)
+          |                                               |                |    has_end: false 0xe97-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe97-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1e5.7 (486)
+          |                                               |                |      records[0:6]: 0x0-0x1e5.7 (486)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             ab|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|28 ef 3f fe 17 f2 cc 7d 9c 0f 59 26 30 7e 69 a8|(.?....}..Y&0~i.|
+  0x000002|c5 95 a7 fb 28 01 11 7d 44 05 1b               |....(..}D..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 27|              .'|              [0]: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" (0xc027) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 4f a8 d2 c9 25 31 3d 51 44 db cf 9e ce 93 77|.O...%1=QD.....w|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x14b.7 (85)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 50            |          .P    |          length: 80 0xfa-0xfb.7 (2)
+  0x00000f|                                    ab 79 5c c7|            .y\.|          encrypted_data: raw bits 0xfc-0x14b.7 (80)
+  0x000010|ff f0 ce 75 3e 9b e9 4b 58 c9 f5 70 9f b6 90 d7|...u>..KX..p....|
+  *       |until 0x14b.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            c2 eb b6 b5 ee de 38 cd 63 d9 fb 88|    ......8.c...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x14c-0x1a0.7 (85)
+  0x000014|                                    17         |            .   |          type: "application_data" (23) (valid) 0x14c-0x14c.7 (1)
+  0x000014|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x14d-0x14e.7 (2)
+  0x000014|                                             00|               .|          length: 80 0x14f-0x150.7 (2)
+  0x000015|50                                             |P               |
+  0x000015|   46 31 b8 77 2c 74 1d 72 33 e5 66 b7 b7 1b 7a| F1.w,t.r3.f...z|          encrypted_data: raw bits 0x151-0x1a0.7 (80)
+  0x000016|1c e1 0b 3a b5 64 82 2e 2e a0 f5 39 51 94 d6 50|...:.d.....9Q..P|
+  *       |until 0x1a0.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x1a1-0x1e5.7 (69)
+  0x00001a|   15                                          | .              |          type: "alert" (21) (valid) 0x1a1-0x1a1.7 (1)
+  0x00001a|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x1a2-0x1a3.7 (2)
+  0x00001a|            00 40                              |    .@          |          length: 64 0x1a4-0x1a5.7 (2)
+  0x00001a|                  b0 44 9e a1 16 cf 28 a8 aa d8|      .D....(...|          encrypted_data: raw bits 0x1a6-0x1e5.7 (64)
+  0x00001b|ef 2e 61 bc 88 a9 d1 b6 9e 2d 0b 4a 8f 4c b2 b8|..a......-.J.L..|
+  *       |until 0x1e5.7 (end) (64)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe97-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe97-NA (0)
+          |                                               |                |    port: 4430 0xe97-NA (0)
+          |                                               |                |    has_start: true 0xe97-NA (0)
+          |                                               |                |    has_end: true 0xe97-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe97-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x898.7 (2201)
+          |                                               |                |      records[0:8]: 0x0-0x898.7 (2201)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             83|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|b3 bd 1f 4a 0b 81 82 b7 2c b7 76 ca b0 90 8b 11|...J....,.v.....|
+  0x000002|66 7b ff e6 60 18 da e5 95 d2 53               |f{..`.....S     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 27      |            .'  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" (0xc027) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   2b 07 d8 bc ec f6 52 00 e5 92 6e 79 29 4d 50| +.....R...ny)MP|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|9b 36 9d d9 21 78 a1 5c c7 0f 61 80 f8 70 74 91|.6..!x.\..a..pt.|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 5b 69 07 9b 46 51 34|.z(....~1[i..FQ4|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3f3.7 (85)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 50                                    |  .P            |          length: 80 0x3a2-0x3a3.7 (2)
+  0x00003a|            2f c1 fb d7 75 1e 61 b7 fc 0d d4 81|    /...u.a.....|          encrypted_data: raw bits 0x3a4-0x3f3.7 (80)
+  0x00003b|b1 24 af 8f 36 30 50 3f ef 57 bf 4d 23 ac 29 49|.$..60P?.W.M#.)I|
+  *       |until 0x3f3.7 (80)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            82 06 33 30 ec 9a bf 5b 59 31 1c 18|    ..30...[Y1..|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3f4-0x898.7 (1189)
+  0x00003f|            17                                 |    .           |          type: "application_data" (23) (valid) 0x3f4-0x3f4.7 (1)
+  0x00003f|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x3f5-0x3f6.7 (2)
+  0x00003f|                     04 a0                     |       ..       |          length: 1184 0x3f7-0x3f8.7 (2)
+  0x00003f|                           d9 18 d1 7b 38 11 2d|         ...{8.-|          encrypted_data: raw bits 0x3f9-0x898.7 (1184)
+  0x000040|90 23 77 57 b9 76 00 ab 13 f5 2c a7 b4 cb 52 71|.#wW.v....,...Rq|
+  *       |until 0x898.7 (end) (1184)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest

@@ -0,0 +1,526 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xdf4-NA (0)
+          |                                               |                |  client{}: 0xdf4-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdf4-NA (0)
+          |                                               |                |    port: 38995 0xdf4-NA (0)
+          |                                               |                |    has_start: true 0xdf4-NA (0)
+          |                                               |                |    has_end: false 0xdf4-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdf4-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x186.7 (391)
+          |                                               |                |      records[0:6]: 0x0-0x186.7 (391)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             e2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|ef d7 4f 51 99 6c 0c 27 87 32 69 49 3a e8 ae 23|..OQ.l.'.2iI:..#|
+  0x000002|8a 7a 3d 4f 1a 23 ea 02 3c ae cc               |.z=O.#..<..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 2f|              ./|              [0]: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" (0xc02f) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 81 b2 44 a1 05 27 33 a5 46 cb fa 71 b8 34 b5|...D..'3.F..q.4.|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x12c.7 (54)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 31            |          .1    |          length: 49 0xfa-0xfb.7 (2)
+  0x00000f|                                    14 42 e3 27|            .B.'|          encrypted_data: raw bits 0xfc-0x12c.7 (49)
+  0x000010|12 e2 5b ad 1a 58 8a bb b0 6d 65 c7 8e 90 bb 33|..[..X...me....3|
+  *       |until 0x12c.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            ea 0e 51 1e 4c 43 2b b8 2e d2 d2 d7|    ..Q.LC+.....|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x12d-0x161.7 (53)
+  0x000012|                                       17      |             .  |          type: "application_data" (23) (valid) 0x12d-0x12d.7 (1)
+  0x000012|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x12e-0x12f.7 (2)
+  0x000013|00 30                                          |.0              |          length: 48 0x130-0x131.7 (2)
+  0x000013|      14 42 e3 27 12 e2 5b ae e7 72 ab da c6 3b|  .B.'..[..r...;|          encrypted_data: raw bits 0x132-0x161.7 (48)
+  0x000014|0e b7 d7 f5 01 4e 22 18 01 5e 93 cb 8a 51 9e 5b|.....N"..^...Q.[|
+  *       |until 0x161.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x162-0x186.7 (37)
+  0x000016|      15                                       |  .             |          type: "alert" (21) (valid) 0x162-0x162.7 (1)
+  0x000016|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x163-0x164.7 (2)
+  0x000016|               00 20                           |     .          |          length: 32 0x165-0x166.7 (2)
+  0x000016|                     14 42 e3 27 12 e2 5b af da|       .B.'..[..|          encrypted_data: raw bits 0x167-0x186.7 (32)
+  0x000017|82 7a 47 41 c4 b5 b6 1d a5 ee ac 77 10 eb 35 1e|.zGA.......w..5.|
+  0x000018|c4 c2 7d e0 56 e2 60|                          |..}.V.`|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xdf4-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdf4-NA (0)
+          |                                               |                |    port: 4430 0xdf4-NA (0)
+          |                                               |                |    has_start: true 0xdf4-NA (0)
+          |                                               |                |    has_end: true 0xdf4-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdf4-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x854.7 (2133)
+          |                                               |                |      records[0:8]: 0x0-0x854.7 (2133)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 11   |           R6,. |              gmt_unix_time: 1379281937 (2013-09-15T21:52:17Z) 0xb-0xe.7 (4)
+  0x000000|                                             fa|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|d4 39 3a 5b 4b 94 e0 fa 5b 02 8a 5c 50 ab 81 9b|.9:[K...[..\P...|
+  0x000002|f1 d8 61 58 62 b4 60 4d 5d 06 f1               |..aXb.`M]..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 2f      |            ./  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" (0xc02f) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   49 02 3a 77 8b 7d 0a 44 89 ff dd 63 e7 4a e1| I.:w.}.D...c.J.|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|96 eb 55 ef f9 3d 36 1e fb a9 e7 75 48 33 00 5a|..U..=6....uH3.Z|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 9c 37 a7 05 83 09 37|.z(....~1.7....7|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3d4.7 (54)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 31                                    |  .1            |          length: 49 0x3a2-0x3a3.7 (2)
+  0x00003a|            b2 9f a4 1e 7f 4a 35 37 ce a3 be 69|    .....J57...i|          encrypted_data: raw bits 0x3a4-0x3d4.7 (49)
+  0x00003b|4e f6 30 34 66 a4 d2 3f 93 0a c0 87 ec ce 2c 39|N.04f..?......,9|
+  *       |until 0x3d4.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            47 30 6b db 87 e1 95 96 e2 99 47 54|    G0k.......GT|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3d5-0x854.7 (1152)
+  0x00003d|               17                              |     .          |          type: "application_data" (23) (valid) 0x3d5-0x3d5.7 (1)
+  0x00003d|                  03 03                        |      ..        |          version: "tls1.2" (0x303) (valid) 0x3d6-0x3d7.7 (2)
+  0x00003d|                        04 7b                  |        .{      |          length: 1147 0x3d8-0x3d9.7 (2)
+  0x00003d|                              b2 9f a4 1e 7f 4a|          .....J|          encrypted_data: raw bits 0x3da-0x854.7 (1147)
+  0x00003e|35 38 32 ed 2c 63 d4 cb dc 31 57 1e ca 80 50 5c|582.,c...1W...P\|
+  *       |until 0x854.7 (end) (1147)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x114a.7 (4427)
+    *     |until 0x114a.7 (end) (4427)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x114a.7 (4427)
+    *     |until 0x114a.7 (end) (4427)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest

@@ -0,0 +1,527 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xe47-NA (0)
+          |                                               |                |  client{}: 0xe47-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe47-NA (0)
+          |                                               |                |    port: 38968 0xe47-NA (0)
+          |                                               |                |    has_start: true 0xe47-NA (0)
+          |                                               |                |    has_end: false 0xe47-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe47-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x1b5.7 (438)
+          |                                               |                |      records[0:6]: 0x0-0x1b5.7 (438)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             be|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|87 74 a9 12 28 07 0f e8 23 26 ef 33 78 ab 50 9c|.t..(...#&.3x.P.|
+  0x000002|cf 45 d5 d1 a8 b8 23 a0 8d 6d 57               |.E....#..mW     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 14|              ..|              [0]: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" (0xc014) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 9f 83 81 2e ee 91 33 8c e6 e0 30 9d 4e d3 7b|.......3...0.N.{|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x13b.7 (69)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 40            |          .@    |          length: 64 0xfa-0xfb.7 (2)
+  0x00000f|                                    fd d1 07 02|            ....|          encrypted_data: raw bits 0xfc-0x13b.7 (64)
+  0x000010|ef ee 4d 56 b3 63 29 61 ce 31 13 26 fe 31 da fa|..MV.c)a.1.&.1..|
+  *       |until 0x13b.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            98 74 c1 0d 49 a9 0a 81 60 02 0b fd|    .t..I...`...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x13c-0x180.7 (69)
+  0x000013|                                    17         |            .   |          type: "application_data" (23) (valid) 0x13c-0x13c.7 (1)
+  0x000013|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x13d-0x13e.7 (2)
+  0x000013|                                             00|               .|          length: 64 0x13f-0x140.7 (2)
+  0x000014|40                                             |@               |
+  0x000014|   b7 75 ac 0d cc ed 41 77 2e 80 c9 97 ed ba 0d| .u....Aw.......|          encrypted_data: raw bits 0x141-0x180.7 (64)
+  0x000015|34 1d 8c e8 67 be 9b 34 4c 08 a5 12 2d 92 46 aa|4...g..4L...-.F.|
+  *       |until 0x180.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x181-0x1b5.7 (53)
+  0x000018|   15                                          | .              |          type: "alert" (21) (valid) 0x181-0x181.7 (1)
+  0x000018|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x182-0x183.7 (2)
+  0x000018|            00 30                              |    .0          |          length: 48 0x184-0x185.7 (2)
+  0x000018|                  dc e1 cb eb 8a a8 b2 db 60 78|      ........`x|          encrypted_data: raw bits 0x186-0x1b5.7 (48)
+  0x000019|b9 7f 4c b0 3a 3b 39 6e 34 42 33 f0 1e 30 1f dd|..L.:;9n4B3..0..|
+  *       |until 0x1b5.7 (end) (48)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xe47-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xe47-NA (0)
+          |                                               |                |    port: 4430 0xe47-NA (0)
+          |                                               |                |    has_start: true 0xe47-NA (0)
+          |                                               |                |    has_end: true 0xe47-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xe47-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x878.7 (2169)
+          |                                               |                |      records[0:8]: 0x0-0x878.7 (2169)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             4c|               L|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|53 e6 88 7c 74 b5 2d 32 c8 e2 c3 19 ad e9 99 2d|S..|t.-2.......-|
+  0x000002|da 6b 4f 08 24 87 75 83 44 3a f7               |.kO.$.u.D:.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 14      |            ..  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" (0xc014) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   15 aa 27 80 34 84 6c f7 5b 03 d9 c2 45 34 48| ..'.4.l.[...E4H|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|a7 62 05 71 4d d6 f1 ad 9e 01 2c 58 9f 72 8f b9|.b.qM.....,X.r..|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 87 1d a4 6f 6d 39 13|.z(....~1...om9.|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3e3.7 (69)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 40                                    |  .@            |          length: 64 0x3a2-0x3a3.7 (2)
+  0x00003a|            49 41 f7 2e b0 3e 18 1d ae 51 63 4a|    IA...>...QcJ|          encrypted_data: raw bits 0x3a4-0x3e3.7 (64)
+  0x00003b|26 68 9a 53 07 67 ce 75 7c 7f 46 f9 63 ea 6d c6|&h.S.g.u|.F.c.m.|
+  *       |until 0x3e3.7 (64)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            5d de 00 d6 4e 80 8a c6 b5 fc c3 6a|    ]...N......j|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3e4-0x878.7 (1173)
+  0x00003e|            17                                 |    .           |          type: "application_data" (23) (valid) 0x3e4-0x3e4.7 (1)
+  0x00003e|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x3e5-0x3e6.7 (2)
+  0x00003e|                     04 90                     |       ..       |          length: 1168 0x3e7-0x3e8.7 (2)
+  0x00003e|                           89 07 6b 5a 14 90 48|         ..kZ..H|          encrypted_data: raw bits 0x3e9-0x878.7 (1168)
+  0x00003f|f0 47 77 ac 25 d6 ad 79 94 16 7e b8 50 0f 05 71|.Gw.%..y..~.P..q|
+  *       |until 0x878.7 (end) (1168)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x1135.7 (4406)
+    *     |until 0x1135.7 (end) (4406)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384.pcap.fqtest

@@ -0,0 +1,527 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xee7-NA (0)
+          |                                               |                |  client{}: 0xee7-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xee7-NA (0)
+          |                                               |                |    port: 38966 0xee7-NA (0)
+          |                                               |                |    has_start: true 0xee7-NA (0)
+          |                                               |                |    has_end: false 0xee7-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xee7-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x215.7 (534)
+          |                                               |                |      records[0:6]: 0x0-0x215.7 (534)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             8f|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|76 c8 c0 dc ce 66 f5 d5 75 a7 2c 5c 33 90 0b d3|v....f..u.,\3...|
+  0x000002|15 9b 80 37 57 aa a5 28 59 92 97               |...7W..(Y..     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 28|              .(|              [0]: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" (0xc028) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 b9 2f 14 eb 86 3c 68 5b b8 e9 73 9b 7e f3 eb|../...<h[..s.~..|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x15b.7 (101)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 60            |          .`    |          length: 96 0xfa-0xfb.7 (2)
+  0x00000f|                                    8f 3d dd 15|            .=..|          encrypted_data: raw bits 0xfc-0x15b.7 (96)
+  0x000010|ac 00 ac 4f 23 a0 82 67 be 5c f5 c5 91 74 ae 38|...O#..g.\...t.8|
+  *       |until 0x15b.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            d6 d3 2c 8f 0f b5 92 e6 3b ff 8f ee|    ..,.....;...|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x15c-0x1c0.7 (101)
+  0x000015|                                    17         |            .   |          type: "application_data" (23) (valid) 0x15c-0x15c.7 (1)
+  0x000015|                                       03 03   |             .. |          version: "tls1.2" (0x303) (valid) 0x15d-0x15e.7 (2)
+  0x000015|                                             00|               .|          length: 96 0x15f-0x160.7 (2)
+  0x000016|60                                             |`               |
+  0x000016|   78 ad 0a bb f2 ca 8e 12 0e a3 86 84 22 42 cc| x..........."B.|          encrypted_data: raw bits 0x161-0x1c0.7 (96)
+  0x000017|1d db 89 fa aa 20 52 1f 6d 8e ca 0b 19 32 03 53|..... R.m....2.S|
+  *       |until 0x1c0.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x1c1-0x215.7 (85)
+  0x00001c|   15                                          | .              |          type: "alert" (21) (valid) 0x1c1-0x1c1.7 (1)
+  0x00001c|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x1c2-0x1c3.7 (2)
+  0x00001c|            00 50                              |    .P          |          length: 80 0x1c4-0x1c5.7 (2)
+  0x00001c|                  41 db f8 9e 80 b9 4c 08 58 2a|      A.....L.X*|          encrypted_data: raw bits 0x1c6-0x215.7 (80)
+  0x00001d|3a 11 02 3c 8d a4 b8 2e d3 4d cf 88 97 22 7a 4d|:..<.....M..."zM|
+  *       |until 0x215.7 (end) (80)                       |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xee7-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xee7-NA (0)
+          |                                               |                |    port: 4430 0xee7-NA (0)
+          |                                               |                |    has_start: true 0xee7-NA (0)
+          |                                               |                |    has_end: true 0xee7-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xee7-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x8b8.7 (2233)
+          |                                               |                |      records[0:8]: 0x0-0x8b8.7 (2233)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             1f|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|4f f9 5c 15 cb 6d 38 5a 1d 4e 43 2f 5c 6b bf ae|O.\..m8Z.NC/\k..|
+  0x000002|ad d3 7a e1 92 c2 98 67 5e 4b 10               |..z....g^K.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 28      |            .(  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" (0xc028) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   67 dc fd c8 a6 ab 26 ad 4e 4a 6e b4 45 58 a4| g.....&.NJn.EX.|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|81 71 85 bd c0 c6 dd 89 77 34 3c a6 55 6d 7c 24|.q......w4<.Um|$|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 34 a4 3e cd 09 e7 a2|.z(....~14.>....|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x403.7 (101)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 60                                    |  .`            |          length: 96 0x3a2-0x3a3.7 (2)
+  0x00003a|            b7 7a 91 d4 d5 cd 22 3a 27 e2 75 ed|    .z....":'.u.|          encrypted_data: raw bits 0x3a4-0x403.7 (96)
+  0x00003b|29 ef 9c 17 31 dd ab 28 5e e4 83 32 44 ae 9d f5|)...1..(^..2D...|
+  *       |until 0x403.7 (96)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            f0 4c c1 bd 40 b5 ef a7 d0 87 bb 89|    .L..@.......|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x404-0x8b8.7 (1205)
+  0x000040|            17                                 |    .           |          type: "application_data" (23) (valid) 0x404-0x404.7 (1)
+  0x000040|               03 03                           |     ..         |          version: "tls1.2" (0x303) (valid) 0x405-0x406.7 (2)
+  0x000040|                     04 b0                     |       ..       |          length: 1200 0x407-0x408.7 (2)
+  0x000040|                           b5 9f 8c d7 5c bf 81|         ....\..|          encrypted_data: raw bits 0x409-0x8b8.7 (1200)
+  0x000041|d9 0d 5c c1 83 59 88 79 de 47 a0 05 d8 3f ea 1f|..\..Y.y.G...?..|
+  *       |until 0x8b8.7 (end) (1200)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x113e.7 (4415)
+    *     |until 0x113e.7 (end) (4415)                    |                |

format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest

@@ -0,0 +1,526 @@
+$ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.pcap
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.tcp_connections[0]{}: tcp_connection 0xdf1-NA (0)
+          |                                               |                |  client{}: 0xdf1-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdf1-NA (0)
+          |                                               |                |    port: 38964 0xdf1-NA (0)
+          |                                               |                |    has_start: true 0xdf1-NA (0)
+          |                                               |                |    has_end: false 0xdf1-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdf1-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x186.7 (391)
+          |                                               |                |      records[0:6]: 0x0-0x186.7 (391)
+          |                                               |                |        [0]{}: record 0x0-0xa5.7 (166)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 01                                       | ..             |          version: "tls1.0" (0x301) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 a1                                 |   ..           |          length: 161 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0xa5.7 (161)
+  0x000000|               01                              |     .          |            type: "client_hello" (1) 0x5-0x5.7 (1)
+  0x000000|                  00 00 9d                     |      ...       |            length: 157 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             12|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|cf 23 62 82 56 e7 45 e9 03 ce a6 96 e9 f6 2a 60|.#b.V.E.......*`|
+  0x000002|ba 0a e8 31 1d 70 de a5 e4 19 49               |...1.p....I     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    00 04      |            ..  |            cipher_suits_length: 4 0x2c-0x2d.7 (2)
+          |                                               |                |            cipher_suits[0:2]: 0x2e-0x31.7 (4)
+  0x000002|                                          c0 30|              .0|              [0]: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" (0xc030) cipher_suit 0x2e-0x2f.7 (2)
+  0x000003|00 ff                                          |..              |              [1]: "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" (0xff) cipher_suit 0x30-0x31.7 (2)
+  0x000003|      02                                       |  .             |            compression_methods_length: 2 0x32-0x32.7 (1)
+          |                                               |                |            compression_methods[0:2]: 0x33-0x34.7 (2)
+  0x000003|         01                                    |   .            |              [0]: "deflate" (0x1) compression_method 0x33-0x33.7 (1)
+  0x000003|            00                                 |    .           |              [1]: "null" (0x0) compression_method 0x34-0x34.7 (1)
+  0x000003|               00 6f                           |     .o         |            extensions_length: 111 0x35-0x36.7 (2)
+          |                                               |                |            extensions[0:5]: 0x37-0xa5.7 (111)
+          |                                               |                |              [0]{}: extension 0x37-0x3e.7 (8)
+  0x000003|                     00 0b                     |       ..       |                type: "ec_point_formats" (11) 0x37-0x38.7 (2)
+  0x000003|                           00 04               |         ..     |                length: 4 0x39-0x3a.7 (2)
+  0x000003|                                 03            |           .    |                ex_points_format_length: 3 0x3b-0x3b.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3c-0x3e.7 (3)
+  0x000003|                                    00         |            .   |                  [0]: 0x0 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       01      |             .  |                  [1]: 0x1 ex_points_format 0x3d-0x3d.7 (1)
+  0x000003|                                          02   |              . |                  [2]: 0x2 ex_points_format 0x3e-0x3e.7 (1)
+          |                                               |                |              [1]{}: extension 0x3f-0x76.7 (56)
+  0x000003|                                             00|               .|                type: "supported_groups" (10) 0x3f-0x40.7 (2)
+  0x000004|0a                                             |.               |
+  0x000004|   00 34                                       | .4             |                length: 52 0x41-0x42.7 (2)
+  0x000004|         00 32                                 |   .2           |                supported_group_length: 50 0x43-0x44.7 (2)
+          |                                               |                |                supported_groups[0:25]: 0x45-0x76.7 (50)
+  0x000004|               00 0e                           |     ..         |                  [0]: 0xe supported_group 0x45-0x46.7 (2)
+  0x000004|                     00 0d                     |       ..       |                  [1]: 0xd supported_group 0x47-0x48.7 (2)
+  0x000004|                           00 19               |         ..     |                  [2]: 0x19 supported_group 0x49-0x4a.7 (2)
+  0x000004|                                 00 0b         |           ..   |                  [3]: 0xb supported_group 0x4b-0x4c.7 (2)
+  0x000004|                                       00 0c   |             .. |                  [4]: 0xc supported_group 0x4d-0x4e.7 (2)
+  0x000004|                                             00|               .|                  [5]: 0x18 supported_group 0x4f-0x50.7 (2)
+  0x000005|18                                             |.               |
+  0x000005|   00 09                                       | ..             |                  [6]: 0x9 supported_group 0x51-0x52.7 (2)
+  0x000005|         00 0a                                 |   ..           |                  [7]: 0xa supported_group 0x53-0x54.7 (2)
+  0x000005|               00 16                           |     ..         |                  [8]: 0x16 supported_group 0x55-0x56.7 (2)
+  0x000005|                     00 17                     |       ..       |                  [9]: 0x17 supported_group 0x57-0x58.7 (2)
+  0x000005|                           00 08               |         ..     |                  [10]: 0x8 supported_group 0x59-0x5a.7 (2)
+  0x000005|                                 00 06         |           ..   |                  [11]: 0x6 supported_group 0x5b-0x5c.7 (2)
+  0x000005|                                       00 07   |             .. |                  [12]: 0x7 supported_group 0x5d-0x5e.7 (2)
+  0x000005|                                             00|               .|                  [13]: 0x14 supported_group 0x5f-0x60.7 (2)
+  0x000006|14                                             |.               |
+  0x000006|   00 15                                       | ..             |                  [14]: 0x15 supported_group 0x61-0x62.7 (2)
+  0x000006|         00 04                                 |   ..           |                  [15]: 0x4 supported_group 0x63-0x64.7 (2)
+  0x000006|               00 05                           |     ..         |                  [16]: 0x5 supported_group 0x65-0x66.7 (2)
+  0x000006|                     00 12                     |       ..       |                  [17]: 0x12 supported_group 0x67-0x68.7 (2)
+  0x000006|                           00 13               |         ..     |                  [18]: 0x13 supported_group 0x69-0x6a.7 (2)
+  0x000006|                                 00 01         |           ..   |                  [19]: 0x1 supported_group 0x6b-0x6c.7 (2)
+  0x000006|                                       00 02   |             .. |                  [20]: 0x2 supported_group 0x6d-0x6e.7 (2)
+  0x000006|                                             00|               .|                  [21]: 0x3 supported_group 0x6f-0x70.7 (2)
+  0x000007|03                                             |.               |
+  0x000007|   00 0f                                       | ..             |                  [22]: 0xf supported_group 0x71-0x72.7 (2)
+  0x000007|         00 10                                 |   ..           |                  [23]: 0x10 supported_group 0x73-0x74.7 (2)
+  0x000007|               00 11                           |     ..         |                  [24]: 0x11 supported_group 0x75-0x76.7 (2)
+          |                                               |                |              [2]{}: extension 0x77-0x7a.7 (4)
+  0x000007|                     00 23                     |       .#       |                type: "session_ticket" (35) 0x77-0x78.7 (2)
+  0x000007|                           00 00               |         ..     |                length: 0 0x79-0x7a.7 (2)
+          |                                               |                |              [3]{}: extension 0x7b-0xa0.7 (38)
+  0x000007|                                 00 0d         |           ..   |                type: "signature_algorithms" (13) 0x7b-0x7c.7 (2)
+  0x000007|                                       00 22   |             ." |                length: 34 0x7d-0x7e.7 (2)
+  0x000007|                                             00|               .|                signature_algorithm_length: 32 0x7f-0x80.7 (2)
+  0x000008|20                                             |                |
+          |                                               |                |                signature_algorithms[0:16]: 0x81-0xa0.7 (32)
+          |                                               |                |                  [0]{}: signature_algorithm 0x81-0x82.7 (2)
+  0x000008|   06                                          | .              |                    hash: "sha512" (6) 0x81-0x81.7 (1)
+  0x000008|      01                                       |  .             |                    signature: "rsa" (1) 0x82-0x82.7 (1)
+          |                                               |                |                  [1]{}: signature_algorithm 0x83-0x84.7 (2)
+  0x000008|         06                                    |   .            |                    hash: "sha512" (6) 0x83-0x83.7 (1)
+  0x000008|            02                                 |    .           |                    signature: "dsa" (2) 0x84-0x84.7 (1)
+          |                                               |                |                  [2]{}: signature_algorithm 0x85-0x86.7 (2)
+  0x000008|               06                              |     .          |                    hash: "sha512" (6) 0x85-0x85.7 (1)
+  0x000008|                  03                           |      .         |                    signature: "ecdsa" (3) 0x86-0x86.7 (1)
+          |                                               |                |                  [3]{}: signature_algorithm 0x87-0x88.7 (2)
+  0x000008|                     05                        |       .        |                    hash: "sha384" (5) 0x87-0x87.7 (1)
+  0x000008|                        01                     |        .       |                    signature: "rsa" (1) 0x88-0x88.7 (1)
+          |                                               |                |                  [4]{}: signature_algorithm 0x89-0x8a.7 (2)
+  0x000008|                           05                  |         .      |                    hash: "sha384" (5) 0x89-0x89.7 (1)
+  0x000008|                              02               |          .     |                    signature: "dsa" (2) 0x8a-0x8a.7 (1)
+          |                                               |                |                  [5]{}: signature_algorithm 0x8b-0x8c.7 (2)
+  0x000008|                                 05            |           .    |                    hash: "sha384" (5) 0x8b-0x8b.7 (1)
+  0x000008|                                    03         |            .   |                    signature: "ecdsa" (3) 0x8c-0x8c.7 (1)
+          |                                               |                |                  [6]{}: signature_algorithm 0x8d-0x8e.7 (2)
+  0x000008|                                       04      |             .  |                    hash: "sha256" (4) 0x8d-0x8d.7 (1)
+  0x000008|                                          01   |              . |                    signature: "rsa" (1) 0x8e-0x8e.7 (1)
+          |                                               |                |                  [7]{}: signature_algorithm 0x8f-0x90.7 (2)
+  0x000008|                                             04|               .|                    hash: "sha256" (4) 0x8f-0x8f.7 (1)
+  0x000009|02                                             |.               |                    signature: "dsa" (2) 0x90-0x90.7 (1)
+          |                                               |                |                  [8]{}: signature_algorithm 0x91-0x92.7 (2)
+  0x000009|   04                                          | .              |                    hash: "sha256" (4) 0x91-0x91.7 (1)
+  0x000009|      03                                       |  .             |                    signature: "ecdsa" (3) 0x92-0x92.7 (1)
+          |                                               |                |                  [9]{}: signature_algorithm 0x93-0x94.7 (2)
+  0x000009|         03                                    |   .            |                    hash: "sha224" (3) 0x93-0x93.7 (1)
+  0x000009|            01                                 |    .           |                    signature: "rsa" (1) 0x94-0x94.7 (1)
+          |                                               |                |                  [10]{}: signature_algorithm 0x95-0x96.7 (2)
+  0x000009|               03                              |     .          |                    hash: "sha224" (3) 0x95-0x95.7 (1)
+  0x000009|                  02                           |      .         |                    signature: "dsa" (2) 0x96-0x96.7 (1)
+          |                                               |                |                  [11]{}: signature_algorithm 0x97-0x98.7 (2)
+  0x000009|                     03                        |       .        |                    hash: "sha224" (3) 0x97-0x97.7 (1)
+  0x000009|                        03                     |        .       |                    signature: "ecdsa" (3) 0x98-0x98.7 (1)
+          |                                               |                |                  [12]{}: signature_algorithm 0x99-0x9a.7 (2)
+  0x000009|                           02                  |         .      |                    hash: "sha1" (2) 0x99-0x99.7 (1)
+  0x000009|                              01               |          .     |                    signature: "rsa" (1) 0x9a-0x9a.7 (1)
+          |                                               |                |                  [13]{}: signature_algorithm 0x9b-0x9c.7 (2)
+  0x000009|                                 02            |           .    |                    hash: "sha1" (2) 0x9b-0x9b.7 (1)
+  0x000009|                                    02         |            .   |                    signature: "dsa" (2) 0x9c-0x9c.7 (1)
+          |                                               |                |                  [14]{}: signature_algorithm 0x9d-0x9e.7 (2)
+  0x000009|                                       02      |             .  |                    hash: "sha1" (2) 0x9d-0x9d.7 (1)
+  0x000009|                                          03   |              . |                    signature: "ecdsa" (3) 0x9e-0x9e.7 (1)
+          |                                               |                |                  [15]{}: signature_algorithm 0x9f-0xa0.7 (2)
+  0x000009|                                             01|               .|                    hash: "md5" (1) 0x9f-0x9f.7 (1)
+  0x00000a|01                                             |.               |                    signature: "rsa" (1) 0xa0-0xa0.7 (1)
+          |                                               |                |              [4]{}: extension 0xa1-0xa5.7 (5)
+  0x00000a|   00 0f                                       | ..             |                type: "heartbeat" (15) 0xa1-0xa2.7 (2)
+  0x00000a|         00 01                                 |   ..           |                length: 1 0xa3-0xa4.7 (2)
+  0x00000a|               01                              |     .          |                data: raw bits 0xa5-0xa5.7 (1)
+          |                                               |                |        [1]{}: record 0xa6-0xf0.7 (75)
+  0x00000a|                  16                           |      .         |          type: "handshake" (22) (valid) 0xa6-0xa6.7 (1)
+  0x00000a|                     03 03                     |       ..       |          version: "tls1.2" (0x303) (valid) 0xa7-0xa8.7 (2)
+  0x00000a|                           00 46               |         .F     |          length: 70 0xa9-0xaa.7 (2)
+          |                                               |                |          message{}: 0xab-0xf0.7 (70)
+  0x00000a|                                 10            |           .    |            type: "client_key_exchange" (16) 0xab-0xab.7 (1)
+  0x00000a|                                    00 00 42   |            ..B |            length: 66 0xac-0xae.7 (3)
+          |                                               |                |            public{}: 0xaf-NA (0)
+  0x00000a|                                             41|               A|              length: 65 0xaf-0xaf.7 (1)
+  0x00000b|04 cb 26 85 d4 3b f7 22 45 dc 2f 49 6f 5d 78 f3|..&..;."E./Io]x.|              data: raw bits 0xb0-0xf0.7 (65)
+  *       |until 0xf0.7 (65)                              |                |
+          |                                               |                |        [2]{}: record 0xf1-0xf6.7 (6)
+  0x00000f|   14                                          | .              |          type: "change_cipher_spec" (20) (valid) 0xf1-0xf1.7 (1)
+  0x00000f|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0xf2-0xf3.7 (2)
+  0x00000f|            00 01                              |    ..          |          length: 1 0xf4-0xf5.7 (2)
+          |                                               |                |          message{}: 0xf6-0xf6.7 (1)
+  0x00000f|                  01                           |      .         |            type: 1 0xf6-0xf6.7 (1)
+          |                                               |                |        [3]{}: record 0xf7-0x12c.7 (54)
+  0x00000f|                     16                        |       .        |          type: "handshake" (22) (valid) 0xf7-0xf7.7 (1)
+  0x00000f|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0xf8-0xf9.7 (2)
+  0x00000f|                              00 31            |          .1    |          length: 49 0xfa-0xfb.7 (2)
+  0x00000f|                                    2b c6 2f 92|            +./.|          encrypted_data: raw bits 0xfc-0x12c.7 (49)
+  0x000010|16 df e9 a7 c3 37 30 df b3 d7 77 1c 0a fb 07 70|.....70...w....p|
+  *       |until 0x12c.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            85 90 1b 38 67 ef 04 a6 4a cc 6e 59|    ...8g...J.nY|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [4]{}: record 0x12d-0x161.7 (53)
+  0x000012|                                       17      |             .  |          type: "application_data" (23) (valid) 0x12d-0x12d.7 (1)
+  0x000012|                                          03 03|              ..|          version: "tls1.2" (0x303) (valid) 0x12e-0x12f.7 (2)
+  0x000013|00 30                                          |.0              |          length: 48 0x130-0x131.7 (2)
+  0x000013|      2b c6 2f 92 16 df e9 a8 16 97 96 fa ff 38|  +./..........8|          encrypted_data: raw bits 0x132-0x161.7 (48)
+  0x000014|cf 30 e5 56 15 9f f8 50 24 01 fa e4 1c 8b 18 d5|.0.V...P$.......|
+  *       |until 0x161.7 (48)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|          message: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |        [5]{}: record 0x162-0x186.7 (37)
+  0x000016|      15                                       |  .             |          type: "alert" (21) (valid) 0x162-0x162.7 (1)
+  0x000016|         03 03                                 |   ..           |          version: "tls1.2" (0x303) (valid) 0x163-0x164.7 (2)
+  0x000016|               00 20                           |     .          |          length: 32 0x165-0x166.7 (2)
+  0x000016|                     2b c6 2f 92 16 df e9 a9 08|       +./......|          encrypted_data: raw bits 0x167-0x186.7 (32)
+  0x000017|19 18 75 1e 6f eb 61 dc 32 92 04 c9 74 02 51 51|..u.o.a.2...t.QQ|
+  0x000018|46 73 e3 78 3f 1a f3|                          |Fs.x?..|        |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0x1.7 (2)
+    0x0000|01                                             |.               |            level: "warning" (1) 0x0-0x0.7 (1)
+    0x0000|   00|                                         | .|             |            description: "close_notify" (0) 0x1-0x1.7 (1)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a|GET / HTTP/1.0..|      stream: raw bits 0x0-0x11.7 (18)
+    0x0000|0d 0a|                                         |..|             |
+          |                                               |                |  server{}: 0xdf1-NA (0)
+          |                                               |                |    ip: "127.0.0.1" 0xdf1-NA (0)
+          |                                               |                |    port: 4430 0xdf1-NA (0)
+          |                                               |                |    has_start: true 0xdf1-NA (0)
+          |                                               |                |    has_end: true 0xdf1-NA (0)
+          |                                               |                |    skipped_bytes: 0 0xdf1-NA (0)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|    stream{}: (tls) 0x0-0x851.7 (2130)
+          |                                               |                |      records[0:8]: 0x0-0x851.7 (2130)
+          |                                               |                |        [0]{}: record 0x0-0x46.7 (71)
+  0x000000|16                                             |.               |          type: "handshake" (22) (valid) 0x0-0x0.7 (1)
+  0x000000|   03 03                                       | ..             |          version: "tls1.2" (0x303) (valid) 0x1-0x2.7 (2)
+  0x000000|         00 42                                 |   .B           |          length: 66 0x3-0x4.7 (2)
+          |                                               |                |          message{}: 0x5-0x46.7 (66)
+  0x000000|               02                              |     .          |            type: "server_hello" (2) 0x5-0x5.7 (1)
+  0x000000|                  00 00 3e                     |      ..>       |            length: 62 0x6-0x8.7 (3)
+  0x000000|                           03 03               |         ..     |            version: "tls1.2" (0x303) 0x9-0xa.7 (2)
+          |                                               |                |            random{}: 0xb-0x2a.7 (32)
+  0x000000|                                 52 36 2c 10   |           R6,. |              gmt_unix_time: 1379281936 (2013-09-15T21:52:16Z) 0xb-0xe.7 (4)
+  0x000000|                                             a2|               .|              random_bytes: raw bits 0xf-0x2a.7 (28)
+  0x000001|66 5e 32 3a 2a db 4b 9d a0 c1 0d 4a 88 23 71 92|f^2:*.K....J.#q.|
+  0x000002|72 f8 b4 c9 7a f2 4f 92 78 48 12               |r...z.O.xH.     |
+  0x000002|                                 00            |           .    |            session_id_length: 0 0x2b-0x2b.7 (1)
+          |                                               |                |            session_id: raw bits 0x2c-NA (0)
+  0x000002|                                    c0 30      |            .0  |            cipher_suit: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" (0xc030) 0x2c-0x2d.7 (2)
+  0x000002|                                          01   |              . |            compression_method: "deflate" (0x1) 0x2e-0x2e.7 (1)
+  0x000002|                                             00|               .|            extensions_length: 22 0x2f-0x30.7 (2)
+  0x000003|16                                             |.               |
+          |                                               |                |            extensions[0:4]: 0x31-0x46.7 (22)
+          |                                               |                |              [0]{}: extension 0x31-0x35.7 (5)
+  0x000003|   ff 01                                       | ..             |                type: "renegotiation_info" (65281) 0x31-0x32.7 (2)
+  0x000003|         00 01                                 |   ..           |                length: 1 0x33-0x34.7 (2)
+  0x000003|               00                              |     .          |                data: raw bits 0x35-0x35.7 (1)
+          |                                               |                |              [1]{}: extension 0x36-0x3d.7 (8)
+  0x000003|                  00 0b                        |      ..        |                type: "ec_point_formats" (11) 0x36-0x37.7 (2)
+  0x000003|                        00 04                  |        ..      |                length: 4 0x38-0x39.7 (2)
+  0x000003|                              03               |          .     |                ex_points_format_length: 3 0x3a-0x3a.7 (1)
+          |                                               |                |                ex_points_formats[0:3]: 0x3b-0x3d.7 (3)
+  0x000003|                                 00            |           .    |                  [0]: 0x0 ex_points_format 0x3b-0x3b.7 (1)
+  0x000003|                                    01         |            .   |                  [1]: 0x1 ex_points_format 0x3c-0x3c.7 (1)
+  0x000003|                                       02      |             .  |                  [2]: 0x2 ex_points_format 0x3d-0x3d.7 (1)
+          |                                               |                |              [2]{}: extension 0x3e-0x41.7 (4)
+  0x000003|                                          00 23|              .#|                type: "session_ticket" (35) 0x3e-0x3f.7 (2)
+  0x000004|00 00                                          |..              |                length: 0 0x40-0x41.7 (2)
+          |                                               |                |              [3]{}: extension 0x42-0x46.7 (5)
+  0x000004|      00 0f                                    |  ..            |                type: "heartbeat" (15) 0x42-0x43.7 (2)
+  0x000004|            00 01                              |    ..          |                length: 1 0x44-0x45.7 (2)
+  0x000004|                  01                           |      .         |                data: raw bits 0x46-0x46.7 (1)
+          |                                               |                |        [1]{}: record 0x47-0x20e.7 (456)
+  0x000004|                     16                        |       .        |          type: "handshake" (22) (valid) 0x47-0x47.7 (1)
+  0x000004|                        03 03                  |        ..      |          version: "tls1.2" (0x303) (valid) 0x48-0x49.7 (2)
+  0x000004|                              01 c3            |          ..    |          length: 451 0x4a-0x4b.7 (2)
+          |                                               |                |          message{}: 0x4c-0x20e.7 (451)
+  0x000004|                                    0b         |            .   |            type: "certificate" (11) 0x4c-0x4c.7 (1)
+  0x000004|                                       00 01 bf|             ...|            length: 447 0x4d-0x4f.7 (3)
+  0x000005|00 01 bc                                       |...             |            certificates_length: 444 0x50-0x52.7 (3)
+          |                                               |                |            certificates[0:1]: 0x53-0x20e.7 (444)
+          |                                               |                |              [0]{}: certificate 0x53-0x20e.7 (444)
+  0x000005|         00 01 b9                              |   ...          |                length: 441 0x53-0x55.7 (3)
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|                data{}: (asn1_ber) 0x56-0x20e.7 (441)
+  0x000005|                  30                           |      0         |                  class: "universal" (0) 0x56-0x56.1 (0.2)
+  0x000005|                  30                           |      0         |                  form: "constructed" (1) 0x56.2-0x56.2 (0.1)
+  0x000005|                  30                           |      0         |                  tag: "sequence" (0x10) 0x56.3-0x56.7 (0.5)
+  0x000005|                     82 01 b5                  |       ...      |                  length: 437 0x57-0x59.7 (3)
+          |                                               |                |                  constructed[0:3]: 0x5a-0x20e.7 (437)
+          |                                               |                |                    [0]{}: object 0x5a-0x17b.7 (290)
+  0x000005|                              30               |          0     |                      class: "universal" (0) 0x5a-0x5a.1 (0.2)
+  0x000005|                              30               |          0     |                      form: "constructed" (1) 0x5a.2-0x5a.2 (0.1)
+  0x000005|                              30               |          0     |                      tag: "sequence" (0x10) 0x5a.3-0x5a.7 (0.5)
+  0x000005|                                 82 01 1e      |           ...  |                      length: 286 0x5b-0x5d.7 (3)
+          |                                               |                |                      constructed[0:6]: 0x5e-0x17b.7 (286)
+          |                                               |                |                        [0]{}: object 0x5e-0x68.7 (11)
+  0x000005|                                          02   |              . |                          class: "universal" (0) 0x5e-0x5e.1 (0.2)
+  0x000005|                                          02   |              . |                          form: "primitive" (0) 0x5e.2-0x5e.2 (0.1)
+  0x000005|                                          02   |              . |                          tag: "integer" (0x2) 0x5e.3-0x5e.7 (0.5)
+  0x000005|                                             09|               .|                          length: 9 0x5f-0x5f.7 (1)
+  0x000006|00 f4 a7 2f d3 e8 fc 37 c4                     |.../...7.       |                          value: 17629111853558544324 0x60-0x68.7 (9)
+          |                                               |                |                        [1]{}: object 0x69-0x77.7 (15)
+  0x000006|                           30                  |         0      |                          class: "universal" (0) 0x69-0x69.1 (0.2)
+  0x000006|                           30                  |         0      |                          form: "constructed" (1) 0x69.2-0x69.2 (0.1)
+  0x000006|                           30                  |         0      |                          tag: "sequence" (0x10) 0x69.3-0x69.7 (0.5)
+  0x000006|                              0d               |          .     |                          length: 13 0x6a-0x6a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x6b-0x77.7 (13)
+          |                                               |                |                            [0]{}: object 0x6b-0x75.7 (11)
+  0x000006|                                 06            |           .    |                              class: "universal" (0) 0x6b-0x6b.1 (0.2)
+  0x000006|                                 06            |           .    |                              form: "primitive" (0) 0x6b.2-0x6b.2 (0.1)
+  0x000006|                                 06            |           .    |                              tag: "object_identifier" (0x6) 0x6b.3-0x6b.7 (0.5)
+  0x000006|                                    09         |            .   |                              length: 9 0x6c-0x6c.7 (1)
+          |                                               |                |                              value[0:7]: 0x6d-0x75.7 (9)
+  0x000006|                                       2a      |             *  |                                [0]: 1 oid 0x6d-0x6d.7 (1)
+  0x000006|                                       2a      |             *  |                                [1]: 2 oid 0x6d-0x6d.7 (1)
+  0x000006|                                          86 48|              .H|                                [2]: 840 oid 0x6e-0x6f.7 (2)
+  0x000007|86 f7 0d                                       |...             |                                [3]: 113549 oid 0x70-0x72.7 (3)
+  0x000007|         01                                    |   .            |                                [4]: 1 oid 0x73-0x73.7 (1)
+  0x000007|            01                                 |    .           |                                [5]: 1 oid 0x74-0x74.7 (1)
+  0x000007|               05                              |     .          |                                [6]: 5 oid 0x75-0x75.7 (1)
+          |                                               |                |                            [1]{}: object 0x76-0x77.7 (2)
+  0x000007|                  05                           |      .         |                              class: "universal" (0) 0x76-0x76.1 (0.2)
+  0x000007|                  05                           |      .         |                              form: "primitive" (0) 0x76.2-0x76.2 (0.1)
+  0x000007|                  05                           |      .         |                              tag: "null" (0x5) 0x76.3-0x76.7 (0.5)
+  0x000007|                     00                        |       .        |                              length: "indefinite" (0) 0x77-0x77.7 (1)
+          |                                               |                |                              value: null 0x78-NA (0)
+          |                                               |                |                        [2]{}: object 0x78-0x98.7 (33)
+  0x000007|                        30                     |        0       |                          class: "universal" (0) 0x78-0x78.1 (0.2)
+  0x000007|                        30                     |        0       |                          form: "constructed" (1) 0x78.2-0x78.2 (0.1)
+  0x000007|                        30                     |        0       |                          tag: "sequence" (0x10) 0x78.3-0x78.7 (0.5)
+  0x000007|                           1f                  |         .      |                          length: 31 0x79-0x79.7 (1)
+          |                                               |                |                          constructed[0:1]: 0x7a-0x98.7 (31)
+          |                                               |                |                            [0]{}: object 0x7a-0x98.7 (31)
+  0x000007|                              31               |          1     |                              class: "universal" (0) 0x7a-0x7a.1 (0.2)
+  0x000007|                              31               |          1     |                              form: "constructed" (1) 0x7a.2-0x7a.2 (0.1)
+  0x000007|                              31               |          1     |                              tag: "set" (0x11) 0x7a.3-0x7a.7 (0.5)
+  0x000007|                                 1d            |           .    |                              length: 29 0x7b-0x7b.7 (1)
+          |                                               |                |                              constructed[0:1]: 0x7c-0x98.7 (29)
+          |                                               |                |                                [0]{}: object 0x7c-0x98.7 (29)
+  0x000007|                                    30         |            0   |                                  class: "universal" (0) 0x7c-0x7c.1 (0.2)
+  0x000007|                                    30         |            0   |                                  form: "constructed" (1) 0x7c.2-0x7c.2 (0.1)
+  0x000007|                                    30         |            0   |                                  tag: "sequence" (0x10) 0x7c.3-0x7c.7 (0.5)
+  0x000007|                                       1b      |             .  |                                  length: 27 0x7d-0x7d.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0x7e-0x98.7 (27)
+          |                                               |                |                                    [0]{}: object 0x7e-0x82.7 (5)
+  0x000007|                                          06   |              . |                                      class: "universal" (0) 0x7e-0x7e.1 (0.2)
+  0x000007|                                          06   |              . |                                      form: "primitive" (0) 0x7e.2-0x7e.2 (0.1)
+  0x000007|                                          06   |              . |                                      tag: "object_identifier" (0x6) 0x7e.3-0x7e.7 (0.5)
+  0x000007|                                             03|               .|                                      length: 3 0x7f-0x7f.7 (1)
+          |                                               |                |                                      value[0:4]: 0x80-0x82.7 (3)
+  0x000008|55                                             |U               |                                        [0]: 2 oid 0x80-0x80.7 (1)
+  0x000008|55                                             |U               |                                        [1]: 5 oid 0x80-0x80.7 (1)
+  0x000008|   04                                          | .              |                                        [2]: 4 oid 0x81-0x81.7 (1)
+  0x000008|      03                                       |  .             |                                        [3]: 3 oid 0x82-0x82.7 (1)
+          |                                               |                |                                    [1]{}: object 0x83-0x98.7 (22)
+  0x000008|         0c                                    |   .            |                                      class: "universal" (0) 0x83-0x83.1 (0.2)
+  0x000008|         0c                                    |   .            |                                      form: "primitive" (0) 0x83.2-0x83.2 (0.1)
+  0x000008|         0c                                    |   .            |                                      tag: "utf8_string" (0xc) 0x83.3-0x83.7 (0.5)
+  0x000008|            14                                 |    .           |                                      length: 20 0x84-0x84.7 (1)
+  0x000008|               54 65 73 74 20 43 65 72 74 69 66|     Test Certif|                                      value: "Test Certificate RSA" 0x85-0x98.7 (20)
+  0x000009|69 63 61 74 65 20 52 53 41                     |icate RSA       |
+          |                                               |                |                        [3]{}: object 0x99-0xb8.7 (32)
+  0x000009|                           30                  |         0      |                          class: "universal" (0) 0x99-0x99.1 (0.2)
+  0x000009|                           30                  |         0      |                          form: "constructed" (1) 0x99.2-0x99.2 (0.1)
+  0x000009|                           30                  |         0      |                          tag: "sequence" (0x10) 0x99.3-0x99.7 (0.5)
+  0x000009|                              1e               |          .     |                          length: 30 0x9a-0x9a.7 (1)
+          |                                               |                |                          constructed[0:2]: 0x9b-0xb8.7 (30)
+          |                                               |                |                            [0]{}: object 0x9b-0xa9.7 (15)
+  0x000009|                                 17            |           .    |                              class: "universal" (0) 0x9b-0x9b.1 (0.2)
+  0x000009|                                 17            |           .    |                              form: "primitive" (0) 0x9b.2-0x9b.2 (0.1)
+  0x000009|                                 17            |           .    |                              tag: "utc_time" (0x17) 0x9b.3-0x9b.7 (0.5)
+  0x000009|                                    0d         |            .   |                              length: 13 0x9c-0x9c.7 (1)
+  0x000009|                                       31 33 30|             130|                              value: "130915215110Z" 0x9d-0xa9.7 (13)
+  0x00000a|39 31 35 32 31 35 31 31 30 5a                  |915215110Z      |
+          |                                               |                |                            [1]{}: object 0xaa-0xb8.7 (15)
+  0x00000a|                              17               |          .     |                              class: "universal" (0) 0xaa-0xaa.1 (0.2)
+  0x00000a|                              17               |          .     |                              form: "primitive" (0) 0xaa.2-0xaa.2 (0.1)
+  0x00000a|                              17               |          .     |                              tag: "utc_time" (0x17) 0xaa.3-0xaa.7 (0.5)
+  0x00000a|                                 0d            |           .    |                              length: 13 0xab-0xab.7 (1)
+  0x00000a|                                    32 33 30 39|            2309|                              value: "230913215110Z" 0xac-0xb8.7 (13)
+  0x00000b|31 33 32 31 35 31 31 30 5a                     |13215110Z       |
+          |                                               |                |                        [4]{}: object 0xb9-0xd9.7 (33)
+  0x00000b|                           30                  |         0      |                          class: "universal" (0) 0xb9-0xb9.1 (0.2)
+  0x00000b|                           30                  |         0      |                          form: "constructed" (1) 0xb9.2-0xb9.2 (0.1)
+  0x00000b|                           30                  |         0      |                          tag: "sequence" (0x10) 0xb9.3-0xb9.7 (0.5)
+  0x00000b|                              1f               |          .     |                          length: 31 0xba-0xba.7 (1)
+          |                                               |                |                          constructed[0:1]: 0xbb-0xd9.7 (31)
+          |                                               |                |                            [0]{}: object 0xbb-0xd9.7 (31)
+  0x00000b|                                 31            |           1    |                              class: "universal" (0) 0xbb-0xbb.1 (0.2)
+  0x00000b|                                 31            |           1    |                              form: "constructed" (1) 0xbb.2-0xbb.2 (0.1)
+  0x00000b|                                 31            |           1    |                              tag: "set" (0x11) 0xbb.3-0xbb.7 (0.5)
+  0x00000b|                                    1d         |            .   |                              length: 29 0xbc-0xbc.7 (1)
+          |                                               |                |                              constructed[0:1]: 0xbd-0xd9.7 (29)
+          |                                               |                |                                [0]{}: object 0xbd-0xd9.7 (29)
+  0x00000b|                                       30      |             0  |                                  class: "universal" (0) 0xbd-0xbd.1 (0.2)
+  0x00000b|                                       30      |             0  |                                  form: "constructed" (1) 0xbd.2-0xbd.2 (0.1)
+  0x00000b|                                       30      |             0  |                                  tag: "sequence" (0x10) 0xbd.3-0xbd.7 (0.5)
+  0x00000b|                                          1b   |              . |                                  length: 27 0xbe-0xbe.7 (1)
+          |                                               |                |                                  constructed[0:2]: 0xbf-0xd9.7 (27)
+          |                                               |                |                                    [0]{}: object 0xbf-0xc3.7 (5)
+  0x00000b|                                             06|               .|                                      class: "universal" (0) 0xbf-0xbf.1 (0.2)
+  0x00000b|                                             06|               .|                                      form: "primitive" (0) 0xbf.2-0xbf.2 (0.1)
+  0x00000b|                                             06|               .|                                      tag: "object_identifier" (0x6) 0xbf.3-0xbf.7 (0.5)
+  0x00000c|03                                             |.               |                                      length: 3 0xc0-0xc0.7 (1)
+          |                                               |                |                                      value[0:4]: 0xc1-0xc3.7 (3)
+  0x00000c|   55                                          | U              |                                        [0]: 2 oid 0xc1-0xc1.7 (1)
+  0x00000c|   55                                          | U              |                                        [1]: 5 oid 0xc1-0xc1.7 (1)
+  0x00000c|      04                                       |  .             |                                        [2]: 4 oid 0xc2-0xc2.7 (1)
+  0x00000c|         03                                    |   .            |                                        [3]: 3 oid 0xc3-0xc3.7 (1)
+          |                                               |                |                                    [1]{}: object 0xc4-0xd9.7 (22)
+  0x00000c|            0c                                 |    .           |                                      class: "universal" (0) 0xc4-0xc4.1 (0.2)
+  0x00000c|            0c                                 |    .           |                                      form: "primitive" (0) 0xc4.2-0xc4.2 (0.1)
+  0x00000c|            0c                                 |    .           |                                      tag: "utf8_string" (0xc) 0xc4.3-0xc4.7 (0.5)
+  0x00000c|               14                              |     .          |                                      length: 20 0xc5-0xc5.7 (1)
+  0x00000c|                  54 65 73 74 20 43 65 72 74 69|      Test Certi|                                      value: "Test Certificate RSA" 0xc6-0xd9.7 (20)
+  0x00000d|66 69 63 61 74 65 20 52 53 41                  |ficate RSA      |
+          |                                               |                |                        [5]{}: object 0xda-0x17b.7 (162)
+  0x00000d|                              30               |          0     |                          class: "universal" (0) 0xda-0xda.1 (0.2)
+  0x00000d|                              30               |          0     |                          form: "constructed" (1) 0xda.2-0xda.2 (0.1)
+  0x00000d|                              30               |          0     |                          tag: "sequence" (0x10) 0xda.3-0xda.7 (0.5)
+  0x00000d|                                 81 9f         |           ..   |                          length: 159 0xdb-0xdc.7 (2)
+          |                                               |                |                          constructed[0:2]: 0xdd-0x17b.7 (159)
+          |                                               |                |                            [0]{}: object 0xdd-0xeb.7 (15)
+  0x00000d|                                       30      |             0  |                              class: "universal" (0) 0xdd-0xdd.1 (0.2)
+  0x00000d|                                       30      |             0  |                              form: "constructed" (1) 0xdd.2-0xdd.2 (0.1)
+  0x00000d|                                       30      |             0  |                              tag: "sequence" (0x10) 0xdd.3-0xdd.7 (0.5)
+  0x00000d|                                          0d   |              . |                              length: 13 0xde-0xde.7 (1)
+          |                                               |                |                              constructed[0:2]: 0xdf-0xeb.7 (13)
+          |                                               |                |                                [0]{}: object 0xdf-0xe9.7 (11)
+  0x00000d|                                             06|               .|                                  class: "universal" (0) 0xdf-0xdf.1 (0.2)
+  0x00000d|                                             06|               .|                                  form: "primitive" (0) 0xdf.2-0xdf.2 (0.1)
+  0x00000d|                                             06|               .|                                  tag: "object_identifier" (0x6) 0xdf.3-0xdf.7 (0.5)
+  0x00000e|09                                             |.               |                                  length: 9 0xe0-0xe0.7 (1)
+          |                                               |                |                                  value[0:7]: 0xe1-0xe9.7 (9)
+  0x00000e|   2a                                          | *              |                                    [0]: 1 oid 0xe1-0xe1.7 (1)
+  0x00000e|   2a                                          | *              |                                    [1]: 2 oid 0xe1-0xe1.7 (1)
+  0x00000e|      86 48                                    |  .H            |                                    [2]: 840 oid 0xe2-0xe3.7 (2)
+  0x00000e|            86 f7 0d                           |    ...         |                                    [3]: 113549 oid 0xe4-0xe6.7 (3)
+  0x00000e|                     01                        |       .        |                                    [4]: 1 oid 0xe7-0xe7.7 (1)
+  0x00000e|                        01                     |        .       |                                    [5]: 1 oid 0xe8-0xe8.7 (1)
+  0x00000e|                           01                  |         .      |                                    [6]: 1 oid 0xe9-0xe9.7 (1)
+          |                                               |                |                                [1]{}: object 0xea-0xeb.7 (2)
+  0x00000e|                              05               |          .     |                                  class: "universal" (0) 0xea-0xea.1 (0.2)
+  0x00000e|                              05               |          .     |                                  form: "primitive" (0) 0xea.2-0xea.2 (0.1)
+  0x00000e|                              05               |          .     |                                  tag: "null" (0x5) 0xea.3-0xea.7 (0.5)
+  0x00000e|                                 00            |           .    |                                  length: "indefinite" (0) 0xeb-0xeb.7 (1)
+          |                                               |                |                                  value: null 0xec-NA (0)
+          |                                               |                |                            [1]{}: object 0xec-0x17b.7 (144)
+  0x00000e|                                    03         |            .   |                              class: "universal" (0) 0xec-0xec.1 (0.2)
+  0x00000e|                                    03         |            .   |                              form: "primitive" (0) 0xec.2-0xec.2 (0.1)
+  0x00000e|                                    03         |            .   |                              tag: "bit_string" (0x3) 0xec.3-0xec.7 (0.5)
+  0x00000e|                                       81 8d   |             .. |                              length: 141 0xed-0xee.7 (2)
+  0x00000e|                                             00|               .|                              unused_bits_count: 0 0xef-0xef.7 (1)
+  0x00000f|30 81 89 02 81 81 00 ac 35 2a 93 7f c5 4f 18 98|0.......5*...O..|                              value: raw bits 0xf0-0x17b.7 (140)
+  *       |until 0x17b.7 (140)                            |                |
+          |                                               |                |                    [1]{}: object 0x17c-0x18a.7 (15)
+  0x000017|                                    30         |            0   |                      class: "universal" (0) 0x17c-0x17c.1 (0.2)
+  0x000017|                                    30         |            0   |                      form: "constructed" (1) 0x17c.2-0x17c.2 (0.1)
+  0x000017|                                    30         |            0   |                      tag: "sequence" (0x10) 0x17c.3-0x17c.7 (0.5)
+  0x000017|                                       0d      |             .  |                      length: 13 0x17d-0x17d.7 (1)
+          |                                               |                |                      constructed[0:2]: 0x17e-0x18a.7 (13)
+          |                                               |                |                        [0]{}: object 0x17e-0x188.7 (11)
+  0x000017|                                          06   |              . |                          class: "universal" (0) 0x17e-0x17e.1 (0.2)
+  0x000017|                                          06   |              . |                          form: "primitive" (0) 0x17e.2-0x17e.2 (0.1)
+  0x000017|                                          06   |              . |                          tag: "object_identifier" (0x6) 0x17e.3-0x17e.7 (0.5)
+  0x000017|                                             09|               .|                          length: 9 0x17f-0x17f.7 (1)
+          |                                               |                |                          value[0:7]: 0x180-0x188.7 (9)
+  0x000018|2a                                             |*               |                            [0]: 1 oid 0x180-0x180.7 (1)
+  0x000018|2a                                             |*               |                            [1]: 2 oid 0x180-0x180.7 (1)
+  0x000018|   86 48                                       | .H             |                            [2]: 840 oid 0x181-0x182.7 (2)
+  0x000018|         86 f7 0d                              |   ...          |                            [3]: 113549 oid 0x183-0x185.7 (3)
+  0x000018|                  01                           |      .         |                            [4]: 1 oid 0x186-0x186.7 (1)
+  0x000018|                     01                        |       .        |                            [5]: 1 oid 0x187-0x187.7 (1)
+  0x000018|                        05                     |        .       |                            [6]: 5 oid 0x188-0x188.7 (1)
+          |                                               |                |                        [1]{}: object 0x189-0x18a.7 (2)
+  0x000018|                           05                  |         .      |                          class: "universal" (0) 0x189-0x189.1 (0.2)
+  0x000018|                           05                  |         .      |                          form: "primitive" (0) 0x189.2-0x189.2 (0.1)
+  0x000018|                           05                  |         .      |                          tag: "null" (0x5) 0x189.3-0x189.7 (0.5)
+  0x000018|                              00               |          .     |                          length: "indefinite" (0) 0x18a-0x18a.7 (1)
+          |                                               |                |                          value: null 0x18b-NA (0)
+          |                                               |                |                    [2]{}: object 0x18b-0x20e.7 (132)
+  0x000018|                                 03            |           .    |                      class: "universal" (0) 0x18b-0x18b.1 (0.2)
+  0x000018|                                 03            |           .    |                      form: "primitive" (0) 0x18b.2-0x18b.2 (0.1)
+  0x000018|                                 03            |           .    |                      tag: "bit_string" (0x3) 0x18b.3-0x18b.7 (0.5)
+  0x000018|                                    81 81      |            ..  |                      length: 129 0x18c-0x18d.7 (2)
+  0x000018|                                          00   |              . |                      unused_bits_count: 0 0x18e-0x18e.7 (1)
+  0x000018|                                             67|               g|                      value: raw bits 0x18f-0x20e.7 (128)
+  0x000019|43 4c a8 a4 3e eb 1b 32 28 70 8b db eb fe f1 b3|CL..>..2(p......|
+  *       |until 0x20e.7 (128)                            |                |
+          |                                               |                |        [2]{}: record 0x20f-0x2e0.7 (210)
+  0x000020|                                             16|               .|          type: "handshake" (22) (valid) 0x20f-0x20f.7 (1)
+  0x000021|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x210-0x211.7 (2)
+  0x000021|      00 cd                                    |  ..            |          length: 205 0x212-0x213.7 (2)
+          |                                               |                |          message{}: 0x214-0x2e0.7 (205)
+  0x000021|            0c                                 |    .           |            type: "server_key_exchange" (12) 0x214-0x214.7 (1)
+  0x000021|               00 00 c9                        |     ...        |            length: 201 0x215-0x217.7 (3)
+          |                                               |                |            curve_params{}: 0x218-NA (0)
+  0x000021|                        03                     |        .       |              curve_type: 3 0x218-0x218.7 (1)
+  0x000021|                           00 17               |         ..     |              named_curve: 23 0x219-0x21a.7 (2)
+          |                                               |                |            public{}: 0x21b-NA (0)
+  0x000021|                                 41            |           A    |              length: 65 0x21b-0x21b.7 (1)
+  0x000021|                                    04 97 e0 a1|            ....|              data: raw bits 0x21c-0x25c.7 (65)
+  0x000022|4e d7 18 a0 e8 17 bf e1 a0 c1 ad 25 65 fd 35 94|N..........%e.5.|
+  *       |until 0x25c.7 (65)                             |                |
+          |                                               |                |            signature_algorithm{}: 0x25d-NA (0)
+  0x000025|                                       06      |             .  |              hash: "sha512" (6) 0x25d-0x25d.7 (1)
+  0x000025|                                          01   |              . |              signature: "rsa" (1) 0x25e-0x25e.7 (1)
+  0x000025|                                             00|               .|              length: 128 0x25f-0x260.7 (2)
+  0x000026|80                                             |.               |
+  0x000026|   4a 39 59 d3 db be 40 32 7a 44 06 e6 2a 2b fc| J9Y...@2zD..*+.|              data: raw bits 0x261-0x2e0.7 (128)
+  0x000027|5d c6 45 32 19 f0 56 b4 bf 60 77 a1 be de af fb|].E2..V..`w.....|
+  *       |until 0x2e0.7 (128)                            |                |
+          |                                               |                |        [3]{}: record 0x2e1-0x2e9.7 (9)
+  0x00002e|   16                                          | .              |          type: "handshake" (22) (valid) 0x2e1-0x2e1.7 (1)
+  0x00002e|      03 03                                    |  ..            |          version: "tls1.2" (0x303) (valid) 0x2e2-0x2e3.7 (2)
+  0x00002e|            00 04                              |    ..          |          length: 4 0x2e4-0x2e5.7 (2)
+          |                                               |                |          message{}: 0x2e6-0x2e9.7 (4)
+  0x00002e|                  0e                           |      .         |            type: "server_hello_done" (14) 0x2e6-0x2e6.7 (1)
+  0x00002e|                     00 00 00                  |       ...      |            length: 0 0x2e7-0x2e9.7 (3)
+          |                                               |                |            data: raw bits 0x2ea-NA (0)
+          |                                               |                |        [4]{}: record 0x2ea-0x398.7 (175)
+  0x00002e|                              16               |          .     |          type: "handshake" (22) (valid) 0x2ea-0x2ea.7 (1)
+  0x00002e|                                 03 03         |           ..   |          version: "tls1.2" (0x303) (valid) 0x2eb-0x2ec.7 (2)
+  0x00002e|                                       00 aa   |             .. |          length: 170 0x2ed-0x2ee.7 (2)
+          |                                               |                |          message{}: 0x2ef-0x398.7 (170)
+  0x00002e|                                             04|               .|            type: "new_session_ticket" (4) 0x2ef-0x2ef.7 (1)
+  0x00002f|00 00 a6                                       |...             |            length: 166 0x2f0-0x2f2.7 (3)
+  0x00002f|         00 00 01 2c                           |   ...,         |            lifetime_hint: 300 0x2f3-0x2f6.7 (4)
+  0x00002f|                     00 a0                     |       ..       |            ticket_length: 160 0x2f7-0x2f8.7 (2)
+  0x00002f|                           c0 b4 67 52 a5 ca da|         ..gR...|            ticket: raw bits 0x2f9-0x398.7 (160)
+  0x000030|99 7a 28 d7 eb e7 a1 7e 31 ae 9f e5 9b f7 14 66|.z(....~1......f|
+  *       |until 0x398.7 (160)                            |                |
+          |                                               |                |        [5]{}: record 0x399-0x39e.7 (6)
+  0x000039|                           14                  |         .      |          type: "change_cipher_spec" (20) (valid) 0x399-0x399.7 (1)
+  0x000039|                              03 03            |          ..    |          version: "tls1.2" (0x303) (valid) 0x39a-0x39b.7 (2)
+  0x000039|                                    00 01      |            ..  |          length: 1 0x39c-0x39d.7 (2)
+          |                                               |                |          message{}: 0x39e-0x39e.7 (1)
+  0x000039|                                          01   |              . |            type: 1 0x39e-0x39e.7 (1)
+          |                                               |                |        [6]{}: record 0x39f-0x3d4.7 (54)
+  0x000039|                                             16|               .|          type: "handshake" (22) (valid) 0x39f-0x39f.7 (1)
+  0x00003a|03 03                                          |..              |          version: "tls1.2" (0x303) (valid) 0x3a0-0x3a1.7 (2)
+  0x00003a|      00 31                                    |  .1            |          length: 49 0x3a2-0x3a3.7 (2)
+  0x00003a|            b3 cd 57 39 69 f9 b7 b5 96 00 df 07|    ..W9i.......|          encrypted_data: raw bits 0x3a4-0x3d4.7 (49)
+  0x00003b|81 c9 6c ea 2c 7c ed 16 29 ab 1b b8 55 09 75 a3|..l.,|..)...U.u.|
+  *       |until 0x3d4.7 (49)                             |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|          message{}: 0x0-0xf.7 (16)
+    0x0000|14                                             |.               |            type: "finished" (20) 0x0-0x0.7 (1)
+    0x0000|   00 00 0c                                    | ...            |            length: 12 0x1-0x3.7 (3)
+    0x0000|            3b fa e7 10 24 77 49 b5 dc f1 1d 35|    ;...$wI....5|            verify_data: raw bits 0x4-0xf.7 (12)
+          |                                               |                |        [7]{}: record 0x3d5-0x851.7 (1149)
+  0x00003d|               17                              |     .          |          type: "application_data" (23) (valid) 0x3d5-0x3d5.7 (1)
+  0x00003d|                  03 03                        |      ..        |          version: "tls1.2" (0x303) (valid) 0x3d6-0x3d7.7 (2)
+  0x00003d|                        04 78                  |        .x      |          length: 1144 0x3d8-0x3d9.7 (2)
+  0x00003d|                              b3 cd 57 39 69 f9|          ..W9i.|          encrypted_data: raw bits 0x3da-0x851.7 (1144)
+  0x00003e|b7 b6 58 f6 d8 b0 cd c6 3c 49 fd e7 75 27 74 25|..X.....<I..u't%|
+  *       |until 0x851.7 (end) (1144)                     |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|          message: raw bits 0x0-0x114a.7 (4427)
+    *     |until 0x114a.7 (end) (4427)                    |                |
+          |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
+    0x0000|48 54 54 50 2f 31 2e 30 20 32 30 30 20 6f 6b 0d|HTTP/1.0 200 ok.|      stream: raw bits 0x0-0x114a.7 (4427)
+    *     |until 0x114a.7 (end) (4427)                    |                |