THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 2
SYN-bit's avatar
18.5k
SYN-bit
updated 2024-05-20 06:03:05 +0000

-z "follow,tcp,ascii,7" will output the TCP payload, which is TLS encrypted data, you will have to use -z "follow,tls,ascii,7" to get to the decrypted data (or -z "follow,http,ascii,7" if the http objects are transferred with compression enabled).

Revision 1
SYN-bit's avatar
18.5k
SYN-bit
answered 2024-05-20 06:01:19 +0000

-z "follow,tcp,ascii,7" will output the TCP payload, which of course is TLS encrypted data, you will have to use -z "follow,tls,ascii,7" to get to the decrypted data (or or (-z "follow,http,ascii,7" if the http objects are transferred with compression enabled).