Ask Your Question

Why is the TLS1.2 Server Hello not recognized?

asked 2019-07-11 20:07:09 +0000

mrEEde gravatar image

updated 2019-07-12 03:58:19 +0000

Got a capture that contains a Server Hello but it is not recognized by wireshark image description

Tried various settings in TCP and TLS protocol without success so far

Would appreciate your thoughts... Regards Matthias

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2019-07-11 20:30:41 +0000

grahamb gravatar image

The Server Hello, Server Certificate and server Hello Done messages are in 3 TCP segments, frames 6, 7 & 9.

You need to have the TCP preference "Allow subdissector to reassemble TCP streams" enabled.

edit flag offensive delete link more


That one I already had checked. It was the TLS preference Reassemble TLS records spanning multiple TCP segments that needed to be checked Thanks

mrEEde gravatar imagemrEEde ( 2019-07-12 03:56:54 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-07-11 20:07:09 +0000

Seen: 1,462 times

Last updated: Jul 12 '19