Why Wireshark display filter does not show http packets?
Solution 1
I had to enable the HTTP protocol by doing the following:
"Analyze -> Enabled Protocols"
This solution was for version 1.12.2 (and disabled by default in version 2.0.2) but should work for any variant of version 1 and 2.
Solution 2
If you have HTTP not on its usual port, you can use the "Analyze -> Decode As" tool in Wireshark to tell it to treat all traffic on this port as a certain protocol.
Comments
-
Pranit Kothari almost 2 years
When I use display filter for HTTP it shows only HTTP packets when HTTP message is on standard port i.e. on port 80. But, when message is not using standard port, then display filter not works for HTTP and I need to filter for TCP and then need to find out HTTP packets manually.
I want to know why this happen? Is it standard behavior or I am doing (or expecting) it wrongly.
Thanks.
-
Jens Bodal about 8 yearsThank you. In one of my labs we turned it off and I forgot ;)
-
Charles Clayton about 8 yearsThis worked for me as well. HTTP wasn't enabled by default for version 2.0.2.
-
FractalSpace about 4 yearsPrecisely my case! Thanks.