You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thanks for your prompt responses. I need to view the source/destination IPs. I compile the code as: gcc tls-hello-dump.c -LOG_ADDRESSES -o tls-hello -lpcap
But the output does not show the addresses. Only the hellos content. Can you clarify?
The text was updated successfully, but these errors were encountered:
tcp port 443 and tcp[tcp[12]/16*4]=22 and (tcp[tcp[12]/16*4+5]=1 or tcp[tcp[12]/16*4+5]=2)
Is this the same exact capture filter that I can use in tcpdump directly? I mean will I get the same output as your parser if I use the above capture filter?
You can use the same filter to obtain a PCAP file that you can later run through tls-hello-dump. The default output of tcpdump however shows a full dissection of the packet, whereas my tool only prints the TLS Hello.
Thanks for your prompt responses. I need to view the source/destination IPs. I compile the code as:
gcc tls-hello-dump.c -LOG_ADDRESSES -o tls-hello -lpcap
But the output does not show the addresses. Only the hellos content. Can you clarify?
The text was updated successfully, but these errors were encountered: