Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Wireshark know the URL in the quic packet

image descriptionimage description I don't use any decryption way. Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?

Wireshark know the URL in the quic packet

image descriptionimage descriptionimage description http://m.qpic.cn/psc?/V52a0KMa3nghGQ3D3tx11KCdxF4Eivkh/TmEUgtj9EK6.7V8ajmQrEFR8CzHXlDdGyjthd3cHTuan8HCpTpLApUm.M1i2wFSICcqs16hZRCfQ5qaYw3Ct5UOLi1GJghDwflDBoikWI!/b&bo=8QaFA*EGhQMDByI!&rf=viewer_4 I don't use any decryption way. Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?

Wireshark know the URL in the quic packet

image description http://m.qpic.cn/psc?/V52a0KMa3nghGQ3D3tx11KCdxF4Eivkh/TmEUgtj9EK6.7V8ajmQrEFR8CzHXlDdGyjthd3cHTuan8HCpTpLApUm.M1i2wFSICcqs16hZRCfQ5qaYw3Ct5UOLi1GJghDwflDBoikWI!/b&bo=8QaFA*EGhQMDByI!&rf=viewer_4 https://cdn.hh010.com/data/attachment/forum/201907/01/174440nnxll0ax7zgnbzl2.png I don't use any decryption way. Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?

Wireshark know the URL in the quic packet

https://cdn.hh010.com/data/attachment/forum/201907/01/174440nnxll0ax7zgnbzl2.png image description I don't use any decryption way. Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?

Wireshark know the URL in the quic packet

image description https://cdn.hh010.com/data/attachment/forum/202412/07/020623d6dg7y7ul4y6fa44.png https://cdn.hh010.com/data/attachment/forum/202412/07/020622rxu3iypj4yt2x3li.png I don't use any decryption way. Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?

Wireshark know the URL in the quic packet

https://cdn.hh010.com/data/attachment/forum/202412/07/020623d6dg7y7ul4y6fa44.png https://cdn.hh010.com/data/attachment/forum/202412/07/020622rxu3iypj4yt2x3li.png https://cdn.hh010.com/data/attachment/forum/202412/07/020622rxu3iypj4yt2x3li.png

I don't use any decryption way. Capture QUIC,I can see the url in "Decrypted QUIC“ and ”Reassembled TLS Handshake“ Isn't http3 already solving the problem that existed in previous versions? There isn't much plaintext information in the packet, like SNI. Why does Wireshark know the URL?How do that?