This shows you the differences between two versions of the page.
| docu:csheet:ofsec:wshark_tls_client_hello [2022/02/17 20:32] – created admin | docu:csheet:ofsec:wshark_tls_client_hello [2022/02/17 20:33] (current) – admin | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ==== Filter tls client hello on Wireshark ==== | ==== Filter tls client hello on Wireshark ==== | ||
| + | In case you want to view TLS client hello packets (to view websites visited), you can do so by using this filter in Wireshark GUI | ||
| \\ | \\ | ||
| <code wireshark> | <code wireshark> | ||
| tls and tls.handshake.type == 1 | tls and tls.handshake.type == 1 | ||
| </ | </ | ||