How to analyze traffic on the fly?

Question

Wireshark

There is a small traffic (HTTP/HTTPS), I emphasize small. Literally 1 request in 20 seconds.
You need to get a request/response link.
Is it possible to do this with TSHARK
Latency doesn't play a big role. Thus, the question boils down to how to make TSHARK collect HTTP packets. The result will be processed programmatically.

Also, the question on HTTPS for the GUI is the ability to specify a log of session keys, but how to do this in TSHARK I

forgot to write OS windows. it is possible to switch to another http sniver, the main thing is that it can decrypt (if there is a log of session keys) https traffic. and it was possible to parse its output, or api

Answer 1

It seems to me that squid with the sslbump option (for reading HTTPS) and ICAP (actually for analyzing / modifying traffic) is suitable for you