SSL matter - after searching for 'ssl' got nothing - used wireless laptop After Login (recorded always by WireShark) to Paypal and GoDaddy.com, I get some data in wireshark trace, but after searching for 'ssl' I get nothing, well where is the problem? WireShark sniffs all packets independently of where belog in Layer Stack? asked 21 Aug '11, 12:02  lse123ws |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
WireShark sniffs all packets independently of where belong in Layer Stack? all packets go the screen of wireshark without choose what's layer's packers to appear? later can apply filter? these are true?
Wireshark captures link-layer packets; if you haven't specified a capture filter, it captures all packets, regardless of what protocols are in the packets above the link layer. You can then apply a display filter to select packets that contain a particular protocol.
If there are packets in the capture that Wireshark recognizes as SSL, a display filter of "ssl" will show them. By default, Wireshark will recognize HTTP packets to or from port 443 as HTTP-over-SSL packets; is your "Login" to those services over HTTP or some other protocol?