wireshark capture filter to specific top level domain

TLS protocol describes the steps to authenticate the peers and set up a secure connection with defined parameters. Handshake: To communicate over a secure channel, two peers must agree on the cryptographic keys and encryption algorithms for that session.Application Data: This protocol ensures that messages are fragmented, compressed, encrypted and transmitted in a secure manner.The change cipher spec message, transmitted by both the client and the server, defines the re-negotiated cipher spec and keys that will be used for all the messages exchanged henceforth. Change Cipher Spec: It defines changes in ciphering strategies.

It is used to notify the peer of any error condition that has occurred.

Alert: This sub-protocol defines the alert levels and provides a description of the alerts.

The higher layer consists of the following sub-protocols:.

Transmitting the data from the upper application layer to the lower transport layer and vice versa.

Applying the Message Authentication Code (MAC), a hash to maintain the data integrity.

Compressing/decompressing the outgoing/incoming data.

Fragmenting the message to be transmitted into manageable blocks.

TCP Record Protocol Layer – This is the lower layer which lies on top of the TCP layer and is responsible for:.

It is designed to work on top of a reliable transport protocol such as TCP (but has been adapted to UDP, as well) and is divided into two sub-layers:

TLS lies in between the application and the transport layer.

Wireshark capture filter to specific top level domain