percentage of each TLS protocol in a pcap file

asked 2019-08-25 04:27:45 +0000

rona gravatar image

I ask a question about percentage of each application layer protocol in pcap file before and it was helpful and i can find the percentage of many protocols such as dns, http , ... . but in my new pcap file i have https and smtp and other protocols that are based on TLS. my problem is that in Statistics -> Protocol Hierarchy i can't see the percentage of these protocols. i can only see that the percentage of TLS protocol is 13 percent and i can't see what percent of this is smtp over TLS, what percent is https and so on. how i can find the percentage of each protocol that is based on TLS?

edit retag flag offensive close merge delete

Comments

Are you able to decrypt the TLS packets?

Jaap gravatar imageJaap ( 2019-08-25 07:53:11 +0000 )edit

yes. i can

rona gravatar imagerona ( 2019-08-25 08:33:40 +0000 )edit

please help me. what should i do? is it true that i divide the number of records of smtp to the number of all records for obtaining smtp percentag? and do this for https too?

rona gravatar imagerona ( 2019-08-25 13:34:35 +0000 )edit