Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2024-05-20 06:01:19 +0000

SYN-bit gravatar image

-z "follow,tcp,ascii,7" will output the TCP payload, which of course is TLS encrypted data, you will have to use -z "follow,tls,ascii,7" or (-z "follow,http,ascii,7" if the http objects are transferred with compression enabled).

-z "follow,tcp,ascii,7" will output the TCP payload, which of course is TLS encrypted data, you will have to use -z "follow,tls,ascii,7" or (to get to the decrypted data (or -z "follow,http,ascii,7" if the http objects are transferred with compression enabled).