Does Wireshark not capture HTTPS packets?

Question

Wireshark does not capture https packets. I tried filtering them using portmap.port == 443 , but the https packet is not displayed, however the http packets are fixed in order.

Any suggestions?

Answer 1

portmap refers to the ONC RPC portmapper protocol . This is used only for ONC RPC protocols such as NFS, YP, and the portmapper / rpcbind protocol itself.

HTTP and HTTP-over-SSL / TLS, i.e. "https", do not use ONC RPC, and in particular, do not use portmapper. They work on top of TCP, so you need a display filter, for example tcp.port == 443 . (If you need a capture filter, so the only traffic you capture is traffic to or from port 443, port 443 will be the equivalent capture filter.)