8

I have been working in Wireshark. And I am able to capture http requests and capturing http packets using Wireshark. And now I am capturing https requests. It seems to not capture the packets and when I right click-> follow-->tcp stream It shows the unreadable characters. Can Wireshark capture https request?

Improve this question
2
  • 1
    Short answer yes. A complete answer will be too long for this format IMHO and we can't guess if you have access to the site private key or not. Start from wireshark wiki.
    – Tensibai
    Commented Feb 24, 2017 at 8:49
  • How to Decrypt SSL and TLS Traffic Using Wireshark Tutorial with screenshots: support.citrix.com/article/CTX116557
    – Vadzim
    Commented Apr 24, 2020 at 19:35

1 Answer 1

Reset to default
10

Wireshark captures all traffic on a network interface. The thing with HTTPS is that it is application layer encryption. Wireshark is not able to decrypt the content of HTTPS. This is because HTTPS encrypts point to point between applications.

The idea here is that HTTPS traffic that travels over the Internet is confidential, a random router or person who happens to capture your packages cannot decrypt the HTTPS without the decryption key.

So bottomline: Wireshark cannot decrypt HTTPS traffic without the decryption key.

More info: https://wiki.wireshark.org/SSL

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .