Comment by xinxolHH for TLS negotiates the TLS version during the handshake....
Thanks!, this is closer to what I was looking for, I have added the ip.src on the fields so I can get the "dump" with each line with the correspoding ip address on the screen in a text file. I am bit...
View ArticleAnswer by Lekensteyn for Hello,I have a long-term capture taken on a server...
TLS negotiates the TLS version during the handshake. The client reports its minimum version through the `tls.record.version` field and the server agrees to it in the Server Hello. If you would like to...
View ArticleComment by xinxolHH for Hello,I have a long-term capture taken on a server...
TShark (Wireshark) 3.0.2 (v3.0.2-0-g621ed351d5c9)
View ArticleComment by grahamb for Hello,I have a long-term capture taken on a server...
Be aware that from Wireshark 3.0 onwards, the SSL dissector has been renamed to TLS, so display filter fields should be prefixed with "tls" rather than "ssl".
View ArticleComment by xinxolHH for Hello,I have a long-term capture taken on a server...
thanks, it is nice to have tls intead of ssl, yes finally, but I think when using tls.record.version I am getting the same outcome. `tshark -r LANInterfaceServer104.pcapng -Y tls.record.version -w...
View ArticleDisplay filter for TLS versions in tshark and saving to a new file.
Hello, I have a long-term capture taken on a server which at the moment is set-up to accept several versions of TLS, 1.1, 1,2 and older ones from outdated clients. The clients are connecting to the...
View Article