Re: https get data

[Guy Harris <guy () alum mit edu>]

On Apr 20, 2012, at 4:01 PM, Bores Valum wrote:

> I am new user of wireshark, so suppose wireshark is running, so if I run for example in my browser something like : 
> https://site.com/?a=14&b=hehe. Does wireshark will capture the get data in plain text as it I have tiped ? or it will 
> be captured in an encrypted format ?

The scheme in your URL is "https", which means that the traffic will be encrypted with SSL/TLS.  Wireshark captures 
network traffic at a very low level, so it'll capture the encrypted traffic, not the decrypted plain-text data.

See the Wireshark Wiki page on SSL:

        http://wiki.wireshark.org/SSL

for information on how to configure Wireshark to attempt to decrypt the traffic.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe