Hi, Why wireshark is not showing http or https packets in the capture view? I have been browsing and facebook and other websites to generate http(s) traffic but I don't see any http(s) traffic..However I see all those browsed sites under TCP and TLS protocols...I am on Ubutun by the way.
Any help would be appreciated!
Thank you.
Plain http is shown if present and recognized in a TCP packet and http dissection is not disabled, so if you have a http communication and can see the text inside the packet bytes but the packet is not marked as http one, the dissector must have been disabled or maybe the server uses an exotic port number.
HTTPS means HTTP over TLS, so unless you have the data necessary to decipher the TLS into plaintext, Wireshark cannot dissect the encrypted contents, so the highest layer protocol recognized in the packet (which is what is displayed in packet list as packet protocol) remains TLS.
Can you post the capture on Cloudshark or any plain file sharing service and edit your Question wih a login-free link to it? Debugging on screenshots is considered tough, but debugging on descriptions is... well... even more tough :-D
Asked: 2018-04-29 10:56:18 +0000
Seen: 49,747 times
Last updated: Apr 29 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
