HTTPS appears to be an new overhead problem with AT&T customers with recent Fiber Broadband network changes. HTTP packets travel this same route but the unsecured, unencrypted packets are not causing a slow down. Of recent, this DPI, Monitoring activity has been impacting our HTTPS channel communications.

Why could the reasons for this to happen with only HTTPS and not HTTP?ĪT&T is performing packet security analysis and DPI (Deep Packet Inspection) in their main network/data center. With escalated support, AT&T has asked that I get a WireShark capture to illustrate the problem. However, all other hosted domains on HTTPS are being disrupted and degraded. While there are still some delays, the packets do not timeout and reset. It appears AT&T has taken the two main domains I cited as examples showing the problem, and and 'white listed' them to improve the HTTPS performance. Click the RSA Keys List Edit button, click New and then enter the following information IP Address is the IP address of the host that holds the private key used to decrypt the data and. In the past month, AT&T has begun degrading, intentionally or unintentionally, the HTTPS channel causing packet disruptions, timeouts and resets with the browser. Select and expand Protocols, scroll down (or just type ssl) and select SSL. I need to do this for three sites on my network. Start Capturing and Log from SRC IP the HTTPS connection to host IP XYZ. What would the command be to capture filter or script or menu options or a reference to an online example? I need to basically say: I need to capture the traffic from my Win7 machine where I just installed WireShark v3 to HTTPS web sites hosted at small office network with AT&T Fiber Ethernet.

Wireshark https capture