This question already has an answer here:

I am trying to snif a SSL/TLS communication and thought about doing it with Wireshark. I've tried to do it and sniffed some with TLSv1.2 protocols, is that the communication? If so, how do I identify and show the messages?


marked as duplicate by techraf, John Deters, Steffen Ullrich tls Oct 3 '16 at 4:25

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


Firefox and Chrome both support logging the symmetric session key used to encrypt TLS traffic, and therefore, can also be used to decrypt using Wireshark.

Here is a link that explains how to do this in detail and with ease: Decrypt Browser Traffic with Wireshark

If so, how do I identify and show the messages?

Simply filter your results (assuming you are able to decrypt at this point).

Not the answer you're looking for? Browse other questions tagged or ask your own question.