[gnutls-help] Many "Hello Request" messages
Rick van Rein
rick at openfortress.nl
Fri Nov 6 11:23:36 CET 2015
> That reminded me of:
Exactly the same, yes. I downloaded your pcap and found the precise same pattern.
> I remember I spent quite some time trying to understand what are these
> messages. Not sure if it was ever forwarded upstream.
I'm not the only one who got confused then ;-)
You seem to have come to the same conclusion too: WireShark is outputting data in a confusing manner, by trying to decode what it can, which is always senseless after a Change CipherSpec. Alaz, WireShark isn't aware of the stream and TLS records don't hint at encryption, so I'm already surprised that it decides that the handshakes are encrypted later on. It's the inconsistency that hurts.
My WireShark is 1.2.12 and it still does this.
More information about the Gnutls-help