2018年12月24日 星期一

(轉)Filter in Wireshark for TLS's Server Name Indication field

Filter in Wireshark for TLS's Server Name Indication field

Does wireshark have a filter for TLS's Server Name Indication field?




4

Shawn E's answer is probably the correct answer but my wireshark version doesnt have that filter. Following filters do exists, however:
To check if the SNI field exists:
ssl.handshake.extension.type == 0
or
ssl.handshake.extension.type == "server_name"

沒有留言:

張貼留言