Why cannot find out Tor Browser's SSL handshake at the default local Tor socks5 proxy port?

Sounds like your Wireshark is pretty outdated.
Either way, try frame contains "torproject" or just tcp.port == 9150.

1 Like