 | 1 | initial version |
Plain http is shown if present and recognized in a TCP packet and http dissection is not disabled, so if you have a http communication and can see the text inside the packet bytes but the packet is not marked as http one, the dissector must have been disabled or maybe the server uses an exotic port number.
HTTPS means HTTP over TLS, so unless you have the data necessary to decipher the TLS into plaintext, Wireshark cannot dissect the encrypted contents, so the highest layer protocol recognized in the packet (which is what is displayed in packet list as packet protocol) remains TLS.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
