All geek questions in one place

Tcpdump for ssl packet filtering

I need to filter out all SSL packets using tcpdump. I know that only the first package can be recognized as ssl. Is it possible to match the first packet and then filter out the rest of the SSL stream?

+4
source share
1 answer

You can also filter the tcp stream in tcpdump, this site explains how to use tcpdump this way, I hope this helps: tcpdump.org/tcpdump_man.html

You will have to adjust it a bit, but it should work.

In addition, there is a special utility SSL_DUMP

+2
source

Source: https://habr.com/ru/post/1382448/

More articles:


All Articles