diff --git a/pictures/Wireshark - TLS decoded.png b/pictures/Wireshark-TLS_decoded.png
similarity index 100%
rename from pictures/Wireshark - TLS decoded.png
rename to pictures/Wireshark-TLS_decoded.png
diff --git a/sniff-tls.md b/sniff-tls.md
index 60efdd5..138da61 100644
--- a/sniff-tls.md
+++ b/sniff-tls.md
@@ -39,7 +39,7 @@ checkEmail = mail@linkplay.com
 cert = /tmp/st7374756E6E656C.pem
 CAfile = /tmp/st7374756E6E656C_ca.pem
 ```
-![Wireshark screenshot](pictures/Wireshark - TLS decoded.png)
+![Wireshark screenshot](/pictures/Wireshark-TLS_decoded.png)
 
 The answer to the requests can be seen in Wireshark by following the TLS stream, but it's also possible to try the discovered command directly with curl:
 ```