# Help, TLS Decryption function is not work
**URL:** https://community.zeek.org/t/help-tls-decryption-function-is-not-work/7676
**Category:** Zeek
**Created:** [December 18, 2024, 8:30am UTC](https://community.zeek.org/t/help-tls-decryption-function-is-not-work/7676 "2024-12-18T08:30:24Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@scyllaever](https://community.zeek.org/u/scyllaever)
#### Post date: [December 18, 2024, 8:30am UTC](https://community.zeek.org/t/help-tls-decryption-function-is-not-work/7676/1 "2024-12-18T08:30:24Z")
I followed the following document to operate (by reading the pcap file),
[https://docs.zeek.org/en/current/frameworks/tls-decryption.html](https://docs.zeek.org/en/current/frameworks/tls-decryption.html)
but the result was that I was unable to restore the HTTP information in tls. The actual generated conn and http logs were exactly the same as the logs decrypted without keylog.
Then I used the keylog and pcap files provided in the zeek test case, but still couldn’t successfully parse tls. Please help me
Zeek version: 6.2.1
Keylog file: Same as the keylog in \zeek\testing\btest\scripts\policy\protocols\ssl\decryption-keylog.zeek
Pcap file: \zeek\testing\btest\Traces\tls\tls-1.2-stream-keylog.pcap
Operation steps:
export ZEEK\_TLS\_KEYLOG\_FILE=/home/tls/testkeylog.txt
/usr/local/zeek/bin/zeek -C -r tls-1.2-stream-keylog.pcap tls\_decryption-1-suspend-processing.zeek
There were no errors after running
---
### Author:  [@scyllaever](https://community.zeek.org/u/scyllaever)
#### Post date: [December 20, 2024, 5:10pm UTC](https://community.zeek.org/t/help-tls-decryption-function-is-not-work/7676/2 "2024-12-20T17:10:01Z")
I know the reason now. Zeek 6.2.1 has a bug in the tls decryption function which prevents it from decrypting tls. After switching to the latest 7. x version, the function is normal