https://serverfault.com/questions/263530/how-can-i-filter-https-traffic-with-wireshark Why was this question closed? Seems perfectly valid to me...