This shows you the differences between two versions of the page.
docu:csheet:ofsec:wshark_tls_client_hello [2022/02/17 20:32] – created admin | docu:csheet:ofsec:wshark_tls_client_hello [2022/02/17 20:33] (current) – admin | ||
---|---|---|---|
Line 1: | Line 1: | ||
==== Filter tls client hello on Wireshark ==== | ==== Filter tls client hello on Wireshark ==== | ||
+ | In case you want to view TLS client hello packets (to view websites visited), you can do so by using this filter in Wireshark GUI | ||
\\ | \\ | ||
<code wireshark> | <code wireshark> | ||
tls and tls.handshake.type == 1 | tls and tls.handshake.type == 1 | ||
</ | </ |