0

Is there any way that I can differentiate, the HTTP or HTTPS packets are coming from browser or not ? specially for https request.There is User-Agent field in packet in Http,but I could not found anything in HTTPS.

1

3 Answers 3

1

yes ,

UA is the header field to do this , as all are saying and as you must be at the server end watching traffic at application level , you can easily watch http header inside ssl too , as you are the far end of the ssl tunnel ,it is available to you after ssl offload

0

The whole point of HTTPS is to protect the traffic from someone capturing it in transit. So, as you have already said, you can sniff and filter on HTTP headers and no, you cannot read/parse/filter on HTTPS traffic.

2
  • 1
    You can if you have the keys.
    – faker
    Nov 21, 2014 at 12:48
  • as you are the other end of the tunnel and you always have session key , its meant for server and client only , Oct 22, 2016 at 4:08
0

In HTTP traffic you can differentiate which traffic came from which browser (or if it came from applications which are not browsers) by looking at the "user-agent" field. You can use UADetector to identify the exact browser. It's a Java library that can identify 190 different browsers (according to what they write).

Regarding HTTPS: as said before the user-agent is encrypted. So you can't do much about it unless you can use a SSL Proxy (SSL man-in-the-middle) to stand between the client/s and the server/s and decrypt all traffic. For example - Fiddler is a (free) tool like that - you can install it on a client and it decrypts all traffic from the brwosers

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .