On 6/8/05, Alexandre Rafalovitch <arafalov@xxxxxxxxx> wrote:
> Malcolm,
>
> Have you tried doing some requests yourself and trying to find them in
> the Ethereal trace? Is your http traffic going to port 80? If it does
> not (e.g. :8080 or :8880), then Ethereal will not know it is HTTP and
> you will need to explicitly 'decode' it.
Actually the HTTP dissector sees as its own traffic in the following ports:
#define TCP_PORT_HTTP 80
#define TCP_PORT_PROXY_HTTP 3128
#define TCP_PORT_PROXY_ADMIN_HTTP 3132
#define TCP_ALT_PORT_HTTP 8080
#define TCP_RADAN_HTTP 8088
#define TCP_PORT_HKP 11371
#define TCP_PORT_DAAP 3689
other than these, from the preferences you can actually change the
alternate port.
> Regards,
> Alex.
>
> On 6/8/05, Malcolm Nicol <malcolm.nicol@xxxxxxxxxxxxx> wrote:
> >
> > All
> >
> > Problem : ethereal installed on span port on cisco 4506 chassis model,
> > getting loads of stuff from arp, stp,NBMS,EIGRP,DNS,TCP and UDP however this
> > is the problem i dont seem to be seeing any http traffic, slightly worries
> > me because what else am i missing on network, i want to capture everything i
> > mean everything
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
