Hi guys, I am using the v2.0.5 however for some SSL traffic, it does not interpret the "Server Hello" packet correctly. For example in a working one I see more "Handshake Protocol" fields such as "Certificate", "Server Key Exchange"... etc however the non-working one only shows the "Server Hello" field. Please find my screenshots at this link https://www.dropbox.com/s/xn45gij35qfaf9v/Untitled.png?dl=0 Thanks! Difan asked 24 Aug '16, 13:18  difan edited 24 Aug '16, 13:19 |
One Answer:
Your trace did not contain full packets therefore wireshark cannot dissect the TLS protocol.
answered 25 Aug '16, 21:49  mrEEde |
Can you share a capture in a publicly accessible spot, e.g. CloudShark?
absolutely. https://www.dropbox.com/s/y3f451iajma2z6v/analytics.pcap?dl=0
Thanks!