Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Thanks for providing the packet capture. The traffic to your server is using port 8088 which is not listed as an https port by default. This means Wireshark does not know how to interpret the TCP payload. Therefor it will only show the TCP payload as data.

Open the preferences and go to Protocols and then HTTP. Then add 8088 to the SSL/TLS Ports list and click on OK. You should now see the TCP payload being interpreted as TLS and whan you now configure the TLS protocol preferences to point to the right SSLKEYLOGFILE, decryption should work.