I am using iptables string match + libnetfilter_queue library to monitor http requests and responses. But later on I realized that string match fails in case of https protocol as iptable captures packets at layer 3.
Now, i am reimplementing it using libpcap. So, is it possible to see what is in header/packet using libpcap in case of https protocol
I am using iptables string match + libnetfilter_queue library to monitor http requests and
Share
HTTPS uses the SSL protocol which encrypts information at the application layer (the highest layer in the OSI model). As such, the answer is no, libpcap will not help you see the contents. If it were possible, it would pretty much defeat the purpose of using SSL in the first place.