https: Monitoring HTTPS traffic

Tags: til linux cli tcpdump tshark
tcpdump \
    -i any \
    -s 0 \
    -w - \
    port 443 \
| tshark \
    -l -n \
    -r - \
    -Y 'tls.handshake.type==1' \
    -T fields \
    -e frame.time \
    -e ip.dst \
    -e tcp.dstport \
    -e tls.handshake.extensions_server_name
Published on: 02 Aug 2026