But any encrypted transmissions that use a pre-master secret or private key will work with this method. In my case, I’ll select one that contains HTTP traffic with text/HTML encoding, since I’d like to see the source code the web server is sending to my browser. Click on any frame containing encrypted data.Visit a secure site in order to generate data, and optionally set a display filter of ‘ssl’ to minimize the session noise.Start an unfiltered capture session, minimize it, and open your browser.The final step is to capture a test session and make sure that Wireshark decrypts SSL successfully. Related post: How to use Wireshark Capture the session and decrypt SSL For other options, see Technical Q&A QA1176 Getting a Packet Trace.When you’ve finished setting the (Pre)-Master-Secret log filename, click OK and return to Wireshark. TCPDump is included with all versions of OS X. Now all Internet traffic from your iPhone will be recorded.The log generated can also be imported by WireShark (which is a GUI version of tcpdump). Use ifconfig if you have a network interface other than en1. In your Mac type sudo tcpdump -s 0 -A -i en1 port 443 > log.txt.Disconnect 3G on your iPhone from Settings > General > Network and check your Internet with Safari.Enable Internet Sharing, and connect to this new Wi-Fi network from your iPhone.In Share your connection from:, choose the interface you are getting Internet from, usually Ethernet. In System Preferences > Sharing set To computers using: Wi-Fi.Give it a random name, select security, and set a password. In the Wi-Fi icon of your toolbar, click Create Network.Or skip this step if you only want to sniff traffic from the app to your own computer. Connect your Mac to your router using an Ethernet cable (the Wi-Fi card will be busy working as access point).

An alternative is using your Mac as a Wi-Fi access point and sniffing the traffic with TCPDump.

How to decrypt https wireshark on mac