Interpreting Packets displayed with ip filter set to xyz.com

I've set my filter to display packets sent to and from xyz.com and i get a bunch of info with TCP and TLS packets. I'm very very new to networking and basically using wireshark for a project. I'd be grateful if you could throw light on this question.

The TCP and TLS packets being shown on wireshark, are they the ones which are ACTUALLY sent over the internet to the destination ip address or is there much more to it? Also, are TLS packets sent with TCP packets (if tcp packets are sent over the internet as reported on wireshark) over the internet or do they just stop at our routers?

tls packets tcp

asked 14 Nov '13, 16:58

anony
11●1●1●2
accept rate: 0%

One Answer:

active answers oldest answers newest answers popular answers

Oh, this really looks like a question from an absolute novice.so this one might be of interest to you

Warriors of the net

Yes

IP packets are actually sent to or received from an IP (Internet Protocol) network.
The transport layer that is used for most internet traffic (Web HTTP) is called TCP.
Ontop of that you see a TLS (SSL Security Layer) which encrypts you application data.

And yes, TLS requires TCP as the transport protocol and those packets -hopefully- don't stop at the (IP)-Routers, otherwise you won't be happy as you don't get anything back in your Firefox ...

permanent link

answered 14 Nov '13, 23:06

mrEEde
3.9k●15●22●70
accept rate: 20%

edited 15 Nov '13, 01:03

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

tcp ×752
packets ×205
tls ×75

question asked: 14 Nov '13, 16:58

question was seen: 1,608 times

last updated: 15 Nov '13, 01:03

Interpreting Packets displayed with ip filter set to xyz.com

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions