Wireshark · Ethereal-users: Re: [Ethereal-users] Decode as a different protocol

[Ulf Lamping <ulf.lamping@xxxxxx>]

Nida, Bob wrote:

> Our MS- ISA Proxy Admin has selected a port different from 80 or 8080
> as the default port for proxy services.  The proxy server is ISA 2003
> (2003 I believe).
>
> NAI Sniffer automatically decodes the proxy activity and formats it
> into a useful means for diagnosis.
>
> I have not been able to convince Ethereal to decode this port as MC
> Proxy.  I use Ethereal and now prefer it over NAI Sniffer.  This is
> about the only thing I can' use Ethereal for.
>
> Help on getting Ethereal to decode this TCP port as MS Proxy?
>
Well, use the "Decode As" feature :-)

See:
http://www.ethereal.com/docs/user-guide/ChAdvProtocolDissectionSection.html#ChAdvDecodeAs

Unfortunately, you can't save the setting, so you'll have to set it each
time you start Ethereal.

Regards, ULFL