TCP segment data -- is it under the SSL section?
I did a capture and frame 2 was 100 B (an ad server, 173.241.242.220, to my internal IP). The protocol was TLSv2; under the TCP section of the packet it said that the TCP Segment Length was 46, but the actual byte highlighted in hex was 50 (80 in decimal), so why does it display hex 50 if the segment data itself composes 46 Bytes? The header of the TCP is 20 B, so I must assume that the 46 B is separate from the header, because directly after the header in the packet comes bytes indexed 54 to 99 (46 Bytes), which are under the Secure Sockets Layer section... is all TCP data encrypted under SSL? How can I see the unencrypted contents?
Thanks..
sorry, can't post an image yet..