Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] URL capture filer??

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: jacob c <jctx09@xxxxxxxxx>
Date: Mon, 4 Feb 2008 15:45:56 -0800 (PST)

Interesting. I didn't realize that Wireshark was trying to resolve www.cnn.com or even why he would??
 
We use a proxy at this site, http, https, dns, ftp, requests are sent to the proxy. For example, an an nslookup fails for www.cnn.com but of course IE can resolve and get there through the proxy.
 
I just wanted/assumed Wireshark would read the http header for www.cnn.com and then capture accordingly. That was my goal. Is there a way to do that if I am using a proxy?
 
Thanks,


Guy Harris <guy@xxxxxxxxxxxx> wrote:
jacob c wrote:
> I have attached two jpg screenshots so you can see what I typed in and
> then the error I get. Please let me know what I'm doing wrong.

As the message says, "unknown host 'www.cnn.com'"; Wireshark's unable to
find the IP address corresponding to the domain name "www.cnn.com".

Can you get to

http://www.cnn.com/

from your Web browser? If not, then it's probably because the browser
is just as unable to resolve the host name "www.cnn.com" to an IP
address as is Wireshark; if you're using Wireshark to try to debug that
problem, I'd suggest using "port domain" as your capture filter, as, to
debug a problem that's probably a DNS problem, you'd need to capture DNS
traffic.
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users


Never miss a thing. Make Yahoo your homepage.
  • Follow-Ups:
    • Re: [Wireshark-users] URL capture filer??
      • From: Guy Harris
    • Re: [Wireshark-users] URL capture filer??
      • From: Stephen Fisher
  • References:
    • Re: [Wireshark-users] URL capture filer??
      • From: Guy Harris
  • Prev by Date: [Wireshark-users] Specifying ssl-key password in Tshark?
  • Next by Date: Re: [Wireshark-users] URL capture filer??
  • Previous by thread: Re: [Wireshark-users] URL capture filer??
  • Next by thread: Re: [Wireshark-users] URL capture filer??
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation