Intrusion detection and detection evasion

[arkenoi]

@bored

There is. By compromising this machine/wireshark. It is parsing all your traffic and while Wireshark might be a security related software it is not secure software.

There is a solution for that: separate capture (small attack surface) and parse (more complex task)