7月24日的Nan - Packet Capture应用程序分析

Why You Need This: - Capture on TCP/IP layer, NOT system proxy. Avoid some applications not going through the proxy - Detect TLS connection and ALPN - Only capture and decrypt HTTPS the address you specify, to prevent certain applications from malfunctioning due to addresses that cannot be captured by packet capture. - Also support decrypt WebSocket How it works: - This app captures all IP packets (IP layer) - Next assemble into TCP stream (TCP layer) - Probe TLS connections and ALPN information to help you determine if there's any possibility of packet capture. - Next assemble into HTTPS/WebSocket packet (Application layer) if you MITM it