Hi, I've been trying to capture Telegram messaging application's packets (for my class project) but I couldn't get anything out of the punch of captured packets I got. Telegram does AES-256 encryption over the users' messages and then send it using normal-Not SSL-transportation protocols (e.g. TCP,HTTP,UDP, etc..) I tried these capturing scenario:
So in my capture filter I tried many filters I assume the most relevant are :
Any ideas what's wrong or what I'm missing here P.S wireshark is set in promiscuous mode asked 20 Dec '14, 07:41 captin |
One Answer:
MTProto supports TCP/UDP and HTTP. If you did not ensure that the client was using HTTP, you won't see anything with the filter http !! You should better filter for the client IP address and the destionation port, based on the client protocol.
Regards answered 27 Dec '14, 08:53 Kurt Knochner ♦ |