I am trying to get my Wireshark to decrypt SSL traffic from my PC when I authenticate to a site to see what format is used when sending the username to the server. I am following the instructions on a tutorial from this site https://jimshaver.net/2015/02/11/decrypting-tls-browser-traffic-with-wireshark-the-easy-way/ Problem is I do not see any tabs at the bottom of the screen in the packet bytes pane. Is there a setting to display those? For what I see in the tutorial, there is a Frame tab, Reassembled TCP tab and Decrypted SSL Data but I do not see any of them on mine. Any pointers, ideas or thoughts? Thanks asked 31 Aug '15, 09:56  troubleshoot... |
One Answer:
Perhaps 1) there's no reassembly being done and 2) there's no decrypting being done, so there's nothing to display in those tabs, so Wireshark can't and doesn't display them (there's the raw frame data, but you won't get tabs if there's only one source of data). We'd have to see your capture to determine what's going on. answered 31 Aug '15, 18:00  Guy Harris ♦♦ |
