Identifying and dropping SSL packets

I want to drop/block SSL packets between two machines (linux). I can see the packets using ethereal开发者_JAVA技巧 and use iproute command (linux) to drop these packets. Is this possible? If yes, what should I use with the iproute command?

Thanks.

---

You can't identify SSL packets at all by their contents, except for the first one in each direction. You could do it via the port number, as long as no form of START TLS was in use in the protocol, so it wouldn't work for SMTP, LDAP, etc. Otherwise you would have to follow entire TCP streams that start with a ClientHello.

Why do you want to do this?