[TBD]Learning packet capture tools

Tcpdump

It is command line tool

tcpdump filters

Wireshark

It is UI based tool

Method to set the custom SSL port

Below configuration adds 6443 in the list

Useful link: https://osqa-ask.wireshark.org/questions/34075/why-wireshark-cannot-display-tlsssl

Method to search text in the packet capture

To find a string within a packet, click on Edit > Find Packet. Under "Find By:" select "string" and enter your search string in the text entry box. You'll probably want to leave "Case sensitive" unchecked

Useful link: https://osqa-ask.wireshark.org/questions/4710/how-do-i-search-a-capture-for-a-string

Reference