


You should see the size of all the packets for that direction. Select the correct direction (Probably SERVER_IP:443 -> YOUR_IP:YOUR_PORT) In the bottom left corner there is a drop-down menu. This data is encrypted but Wireshark does calculate the size of this "conversation.” Using the correct TCP stream index, you can "follow" the TCP stream in a new Window that displays the data. You can always "eyeball it" by using "Follow TCP." (CTRL+ALT+SHIFT+T) (You may need to enable "Allow subdissector to reassemble TCP streams" in TCP protocol preferences)īut because this 7-zip file is served over HTTPS everything is encrypted.

You would see the size (in KB) for your file. If the file was downloaded over HTTP then you could simply check the size before exporting it from the capture using This will be difficult because is using HTTPS.
