Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] Decode as a different protocol

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Nida, Bob" <BONida@xxxxxxxxxxxx>
Date: Mon, 11 Jul 2005 16:14:46 -0400
Thanks, I've looked in there.  But, the protocol which I would think is
appropriate, "MS Proxy", is not in the selection box on the right side
there.

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Ulf Lamping
Sent: Monday, July 11, 2005 3:53 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Decode as a different protocol


Nida, Bob wrote:

> Our MS- ISA Proxy Admin has selected a port different from 80 or 8080 
> as the default port for proxy services.  The proxy server is ISA 2003 
> (2003 I believe).
>
> NAI Sniffer automatically decodes the proxy activity and formats it 
> into a useful means for diagnosis.
>
> I have not been able to convince Ethereal to decode this port as MC 
> Proxy.  I use Ethereal and now prefer it over NAI Sniffer.  This is 
> about the only thing I can' use Ethereal for.
>
> Help on getting Ethereal to decode this TCP port as MS Proxy?
>
Well, use the "Decode As" feature :-)

See:
http://www.ethereal.com/docs/user-guide/ChAdvProtocolDissectionSection.h
tml#ChAdvDecodeAs

Unfortunately, you can't save the setting, so you'll have to set it each
time you start Ethereal.

Regards, ULFL

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users