Client Hello not formatting when TLS header starts x160301

asked 2026-06-24 20:43:08 +0000

tcpipman gravatar image

I have a PCAP where the Client Hello starts the TCP Payload with 16 03 01 ... Wireshark does not seem to see this as a TLS hello packet and does not break it down for us. IS there some decode method I need to use for this? Tried TLS as decode but it did not change anything.

edit retag flag offensive close merge delete

Comments

Can you share a packet capture or hex dump of this packet?
Are your tcp ports in the dissector table tcp.port?
(View -> Internals -> Dissector Tables; search for TLS; scroll down to TCP Port tcp.port)

Chuckc gravatar imageChuckc ( 2026-06-24 23:14:10 +0000 )edit
add a comment