Egress traffic on 443 port marked as unknown but on port 80 shows correctly

1

I’m trying to build a Chart in Stackdriver using the example from documentation:

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: wikipedia
spec:
  hosts:
  - "*.wikipedia.org"
  ports:
  - number: 443
    name: tls-wikipedia
    protocol: HTTPS
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: wikipedia
spec:
  hosts:
  - "*.wikipedia.org"
  tls:
  - match:
    - port: 443
      sni_hosts:
      - "*.wikipedia.org"
    route:
    - destination:
        host: "*.wikipedia.org"
        port:
          number: 443

However, traffic on the Chart is marked as Unknown and I cannot find the reason why.

The same example but on port 80 works like a charm:

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: httpbin
spec:
  hosts:
  - "httpbin.org"
  ports:
  - number: 80
    name: http-httpbin
    protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: httpbin
spec:
  hosts:
  - "httpbin.org"
  tls:
  - match:
    - port: 80
      sni_hosts:
      - "httpbin.org"
    route:
    - destination:
        host: "httpbin.org"
        port:
          number: 80

Any thoughts on this? Why TLS traffic is not sniffed correctl?