When I run fiddler with a proxy for the BlueStacks Android emulator (on Windows), many of the results are listed as "Tunnel to" a random IP address, with no headers and no information on the data sent. Clicking on one reveals "A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below." but nothing else that I can decipher.
I have HTTPS capture and decrypt on, and it works for a few API calls from this app, but the majority are shown as the IP addresses explained above.
Am I doing something wrong? How can I fix it so that I can see information on these.
The Connect TUNNEL enables a client to send HTTPS traffic through an HTTP Proxy (like Fiddler). So, even if Fiddler is configured to capture and decrypt HTTPS traffic, it won't do so unless the client has the FIddler root CA installed and fully trusted. You most likely need to install and trust the Fiddler root certificate on the BlueStack emulator (refer to this documentation articleon achieving that on a real device/state emulator).