 | 1 | initial version |
You can track hostname in TLS traffic with fields like: tls.handshake.extensions_server_name ssl.handshake.extensions_server_name x509sat.printableString
If you know what name to match in the query then you find what is used. Howeve it seems you are in for a game of "whack a mole".
| | 2 | No.2 Revision |
You can track hostname in TLS traffic with fields like:
like:
tls.handshake.extensions_server_name
ssl.handshake.extensions_server_name
x509sat.printableStringx509sat.printableString
If you know what name to match in the query then you find what is used. Howeve used.
However it seems you are in for a game of "whack a mole".