Wireshark-dev: Re: [Wireshark-dev] un-encrypted traffic over port 443
From: Jakub Zawadzki <[email protected]>
Date: Sun, 29 Jun 2014 20:55:41 +0200

On Sun, Jun 29, 2014 at 01:43:39PM +0200, Toralf Förster wrote:
> /mew wonders if wireshark should print a warning if a http traffic goes
> over port 443 (eg a TRAC temporarily configured at that port instead of
> 80) but is not encrypted, currently those packets are marked as "SSL"
> but they aren't secure.

Could you try if enabling 'tcp.try_heuristic_first' option, does dissect packet as http?