How do I view HTTP or HTTPS requests?
I have made many different requests, both HTTP and HTTPS, but Wireshark isn't showing them. Is there a way I can see it?
2 Answers
- Sort by
oldest newest most voted
0
Please confirm that you are capturing the right network packets.
In the Wire shark, you can see the protocol tab. For the http protocol, just mention the same as HTTP, and for the https protocol, mention HTTPS .Normally, you are not able to see the HTTPS packet because it is encrypted.
Just enter http on filter tab you are able to filter the traffic.
Comments
Thanks, but neither solutions work. Do you know why that might be?
Actually, http works, but I still can't view https. It isn't even showing up as a valid protocol. Is there another protocol it uses? Do I have to decrypt the data?
0
You haven't written if you see any packets at all. If not, then you are not capturing correct network. If yes, then you probably not writing correct display filter.
For http traffic use display filter: http
For https traffic use display filter: tls
TLS is general encryption protocol that can contain many application layer protocols like HTTP for example. Imagine TLS like encryption tunnel. You can't see inside the encryption tunnel which application protocol is inside. It can be HTTP, it can be some database application protocol or something else. Protocol HTTPS means secure HTTP or in the language of network it is HTTP over TLS protocol.
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments