Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Filter TLS with no Server Hello

Hello,

I see I can filter "tls.handshake.type == 1" for Client Hello and "tls.handshake.type == 2" for server hello. I have server side capture and I want to filter all the TCP stream which has "Client Hello" but no "Server Hello" response back.

Any filter i can use?