I'm looking into a problem between browsers and a Citrix ADC Vserver and am currently trying to determine what the cipher suite and ECC Curves the server & client negotiate.
I can use filter tls.handshake.ciphersuite to filter just the packets that contain the client hello & server hello packets that contain the cipher suites & ECC curves (extensions supported group) the client supports and the suite the server chooses. The server hello clearly show the chosen cipher suite but i can't find what ecc curve the server chooses.
Can someone point me to how i can find out the elliptic curve negotiated between the 2.
Thanks
