First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

which wireshark filter shall i use to check if some ip is blocked at the server end

  • retag add tags

My traffic is going like client __> proxy __> server. There is one external site which is running on https protocol which I am able to access but when I am login in its showing me error " something went wrong". And I can access and login same using my personnel laptop. So whats going wrong when the traffic is going to proxy, i captured packet through Wireshark. I can see in that tcp and ssl handshake is occuring with no error. But there is nothing related to login and authentication, What filter shall I use to check why server is rejecting my credentials over proxy. How can i check if they have been blocked the zscaler ip address at their server end.

Jyoti's avatar
1
Jyoti
asked 2020-10-11 11:27:30 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

As it's https, the traffic will be encrypted so you will need to decrypt it to see any credentials being passed.

See the Wiki page on TLS for details on how to to decrypt TLS traffic.

grahamb's avatar
23.8k
grahamb
answered 2020-10-12 07:26:58 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments
0

Does the proxy do SSL Intercept? If not, Then the best thing is just to run your browser in debug mode. Otherwise let the proxy capture the packets unencrypted and see what is going on there. But proxy troubleshooting is usually done on the proxy.

hugo.vanderkooij's avatar
76
hugo.vanderkooij
answered 2020-10-12 07:59:13 +0000
edit flag offensive 0 remove flag delete link

Comments

Hey, my office is using zscaler proxy, on the zscaler portal, i can clearly see this specific url is not ssl inspected through zscaler and there is no block. Thing is I am able to access the website but when i am login/authenticated in it showing me -something went wrong error though I am putting the correct credentials. If I am connected to my office network, that time traffic does not go through the proxy, and my credentials on that website is working fine. May I ask you what could be the possible reason about not able to authenticate when traffic going through proxy.

Jyoti's avatar Jyoti (2020-10-13 15:07:09 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer