ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 9134] New: HTTP dissector: Be able to search through HTTP

Date: Wed, 11 Sep 2013 21:03:25 +0000
Bug ID 9134
Summary HTTP dissector: Be able to search through HTTP request and HTTP response lines
Classification Unclassified
Product Wireshark
Version SVN
Hardware x86
OS FreeBSD
Status UNCONFIRMED
Severity Major
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Created attachment 11541 [details]
Patch for the above described functionality.

Build Information:
wireshark 1.11.0 (SVN Rev 51947 from /trunk)

Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 3.6.4, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.3, with libpcap, with libz 1.2.7, without POSIX capabilities, without
libnl, with SMI 0.4.8, without c-ares, with ADNS, without Lua, without Python,
with GnuTLS 2.12.23, with Gcrypt 1.5.2, with Heimdal Kerberos, with GeoIP,
without PortAudio, with AirPcap.

Running on FreeBSD 9.1-RELEASE, without locale, with libpcap version 1.2.1,
with
libz 1.2.7, GnuTLS 2.12.23, Gcrypt 1.5.2, without AirPcap.

Built using gcc 4.2.1 20070831 patched [FreeBSD].

--
During the dissection of an HTTP request or reply header, some of the fields
are put in specific fields (http.request.host, htt.response.contentlength)
while the rest is thrown in the text field.

Recently I needed to search for some custom HTTP header fields which are not
dissected by default in their own fields but the text filter was giving me too
much hits of unrelated text fields.

This patch add two fields, http.request.line and http.response.line, which
contain all the lines in the HTTP request and response headers so that they can
be used to filter through too.

Thanks in advance!


You are receiving this mail because:
  • You are watching all bug changes.