Wireshark-users: [Wireshark-users] Passive Web Access Monitoring
From: "chowalit.lab Chowalit Lab Linux" <[email protected]>
Date: Wed, 27 Sep 2006 16:53:43 +0700
Dear All,
     I have question about ability of tshark to monitoring web access
on network traffic.
     I want to tap/sniff traffic of my clients to monitoring
web-access activity of clients. Output of this monitoring is logfile
look like squid access.log such as:

1159259853.197    667 x.x.x.x TCP_MISS/404 3036 GET
http://nannooknew0.tripod.com/Image/hearts11.gif - DIRECT/209.202.22
6.100 text/html

     How to use tshark command and parameter to reach this output?