Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Apparently, Wireshark doesn't decrypt thoroughly HTTP2 traffic

I watched a video on the internet, and captured the network trace. Mozilla DevTools tells me it is an HLS stream, comprised by two manifest files .m3u8, a master and an index, and 18 .ts segments.

But Wireshark decrypts only the last segment. in fact, the filter:

http2.request.full_uri contains ".ts" or http2.request.full_uri contains ".m3u8"

displays only one frame, the number 909, containing the segment 0018.ts
I think that something went wrong with the decryption of the preceding packets, that remained undecrypted and compressed, so the filter could not detect them.