[Network Packet Capture] TLS monitoring on all ports possible?

Hi everyone,

this is more a feature request and compliance driven, but I did not find any elastic built-in solution for this.

Situation is:
I want to monitor all traffic on given host and get following information:
- Is encryption in transit / TLS happening from/to the host?
- If yes, which TLS metadata is given (TLS version, cipher spec etc).

As of today, one has to know and specify the TLS ports in question in advance as part of the integration config to get this kind of information:

Is it technically possible to get this information in case the ports are unknown? Something like "hey integration, please monitor all connections and list the TLS related attributes"? Communication on ports where no connection is happening at all (e.g. no listener active) should be simply ignored.

Thanks.