hello: I have 5 gig trace file and i need to extract all the streams which has below server name on tls handshake. is there a tshark command to create a new tracefile with only those streams or is there any other way to accomplish?
tls.handshake.extensions_server_name == "outlook.office365.com".
thanks