Revision history [back]

Hi,

So I've been able to decode a live capture WSS over HTTPS of course with Wireshark but it seems that TShark is not capable of doing so unless I am doing something wrong.

Here is how I am running it but the output is empty

C:\Program Files\Wireshark>tshark.exe -i 4 -o tls.keylog_file:C:\Users\iulian\Desktop\ssl.txt -o tls.desegment_ssl_records:TRUE -o tls.desegment_ssl_application_data:TRUE -d tcp.port==443,tls -Y websocket

Best, -iulian

Hi,

So I've been able to decode a live capture WSS over HTTPS of course (of course) with Wireshark but it seems that TShark is not capable of doing so unless I am doing something wrong.

Here is how I am running it but the output is empty

C:\Program Files\Wireshark>tshark.exe -i 4 -o tls.keylog_file:C:\Users\iulian\Desktop\ssl.txt -o tls.desegment_ssl_records:TRUE -o tls.desegment_ssl_application_data:TRUE -d tcp.port==443,tls -Y websocket

Best, Best,

-iulian

Hi,

So I've been able to decode a live capture WSS over HTTPS (of course) with Wireshark but it seems that TShark is not capable of doing so unless I am doing something wrong.

Here is how I am running it but the output is empty

C:\Program Files\Wireshark>tshark.exe -i 4 -o tls.keylog_file:C:\Users\iulian\Desktop\ssl.txt -o tls.desegment_ssl_records:TRUE -o tls.desegment_ssl_application_data:TRUE -d tcp.port==443,tls -Y websocket
websocket