Ethereal-users: RE: [Ethereal-users] NO HTTP TRAFFIC IN CAPTURE
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Malcolm Nicol" <malcolm.nicol@xxxxxxxxxxxxx>
Date: Thu, 9 Jun 2005 15:44:20 +0100
Thanks all for your responses, alas i made the mistake myself. A lesson learned, when you unplug the firewall from lan make sure you put it back in same port on switch it does help, makes a big difference when you have the port configured as a mirror. thanks for your quick responses mal -----Original Message----- From: LEGO [mailto:luis.ontanon@xxxxxxxxx] Sent: 08 June 2005 16:22 To: Alexandre Rafalovitch; Ethereal user support Subject: Re: [Ethereal-users] NO HTTP TRAFFIC IN CAPTURE On 6/8/05, Alexandre Rafalovitch <arafalov@xxxxxxxxx> wrote: > Malcolm, > > Have you tried doing some requests yourself and trying to find them in > the Ethereal trace? Is your http traffic going to port 80? If it does > not (e.g. :8080 or :8880), then Ethereal will not know it is HTTP and > you will need to explicitly 'decode' it. Actually the HTTP dissector sees as its own traffic in the following ports: #define TCP_PORT_HTTP 80 #define TCP_PORT_PROXY_HTTP 3128 #define TCP_PORT_PROXY_ADMIN_HTTP 3132 #define TCP_ALT_PORT_HTTP 8080 #define TCP_RADAN_HTTP 8088 #define TCP_PORT_HKP 11371 #define TCP_PORT_DAAP 3689 other than these, from the preferences you can actually change the alternate port. > Regards, > Alex. > > On 6/8/05, Malcolm Nicol <malcolm.nicol@xxxxxxxxxxxxx> wrote: > > > > All > > > > Problem : ethereal installed on span port on cisco 4506 chassis model, > > getting loads of stuff from arp, stp,NBMS,EIGRP,DNS,TCP and UDP however this > > is the problem i dont seem to be seeing any http traffic, slightly worries > > me because what else am i missing on network, i want to capture everything i > > mean everything > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users > -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan _______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs Email Security System. http://www.messagelabs.com ________________________________________________________________________
- Prev by Date: Re: [Ethereal-users] Remote Capture problems...
- Next by Date: [Ethereal-users] M3UA Decoding Error
- Previous by thread: Re: [Ethereal-users] NO HTTP TRAFFIC IN CAPTURE
- Next by thread: [Ethereal-users] Need help in Packet Capture !!!
- Index(es):
- Get Wireshark
- Download
- Code of Conduct