In the captured packet, see an HTTP GET request, right-click, then follow stream
Wireshark automatic packet filtering Tcp.stream EQ 1340, and can see complete data communication
get/hero/zhcn/client/alert?build=zhcn&targetregion=0&homecountry= http/1.1
User-agent:blizzard Web Client
Host:nydus.battle.net
Cache-control:no-cache
http/1.1 302 Found
Date:sat, 03:15:30 GMT
Server:apache
X-frame-options:sameorigin
cache-control:max-age=3600
Location:http://invalid.launcher.battle.net/service/hero/alert/zh-cn
content-length:243
content-type:text/html; Charset=iso-8859-1
<! DOCTYPE HTML PUBLIC "-//ietf//dtd HTML 2.0//en" >
<title>302 found</title>
<p>the document has moved <a href= "HTTP://INVALID.LAUNCHER.BATTLE.NET/SERVICE/HERO/ALERT/ZH-CN" >here </a>.</p>
</body>
See in the TLSv1.2 data stream
Crl4.digicert.com
Https://www.digicert.com
DigiCert is the go-to provider of identity, authentication, and encryption solutions for the web and IoT devices.
We help enterprises of every size-deploy PKI security that aligns with industry standards and best practices.
Our SSL tools and Enterprise-grade platform simplify management, automate certificate tasks, and give organizations the PO Wer to customize workflows to best fit their needs.
SSL for IP can be filtered and specified with the following syntax
SSL and ip.dst== 24.105.29.76
Then select a clien thello,follow TCP stream
Storm Hero HTTP 302 redirect