Reliably find out if application is using encryption

user93314 asked:

There is an client-server app written in Java. They communicate to each other somehow.
Unfortunately our technician is not reliable (we are going to fire him).

He accepted that application from the company. They are claiming that everything is secure.

I am not a technican person, can you help me to find out if communication between client and server is encrypted?

I have access to the server. The server is Windows Server.

One suggested to use netstat but I don’t know how to use it (which parameters to provide)

My answer:

Actually, the program you will want to use is wireshark. You can use wireshark to capture the actual network traffic that the application is generating and inspect it, then determine what type of traffic it is, what data it contains, etc.

View the full question and any other answers on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.