With capture filter
This question is marked "community wiki".
|
It might be that you do not receive all HTTPS packets when promiscuous mode is not enabled. Or maybe you started the non-promiscuous trace without restarting the browser, which means you will see only reused ssl sessions, which do not contain the session-key exchange. |