 | 1 | initial version |
Using the snakeoil2 sample cature, the TLS is decrypted as HTTP.
1. A display filter of http contains "Linux" returns 12 frames.
2. Or you can select a decrypted packet, right click and use Follow->TLS Stream or Follow->HTTP Stream.
3. Or disable the decode for HTTP and filter on data.data contains "Linux"
