This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I first cleared all the cookies in my browser. Then I went to www.yahoo.com. Mean while wireshark was capturing. In the search field of the wireshark, I entered http.set_cookie. But the filtered packets do not show all the cookies that are set in the browser. For example, the cookies shown(in wireshark) in the domain in.yahoo.com is only fpc. Where as in the browser 6 more cookies are set in that domain(like fpps, fpc_s, fpt etc)
Why is this happening? Is wireshark not able to capture all the packets?

asked 19 Apr '12, 22:02

Ashwin's gravatar image

Ashwin
31337
accept rate: 0%

edited 19 Apr '12, 22:03


Wireshark will not be able to capture any set_cookie commands that were sent encrypted over HTTPS. Since some websites will change from HTTP to HTTPS for "sensitive" transactions, please check to see whether there was HTTPS traffic which might have set the cookies. This is especially true if you logged into Yahoo with your ID and password during the session.

It is also possible for cookies to be set by javascript commands embedded in an HTML page, which your search filter may not detect.

permanent link

answered 20 Apr '12, 01:11

inetdog's gravatar image

inetdog
16717
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×549
×184
×14

question asked: 19 Apr '12, 22:02

question was seen: 4,439 times

last updated: 20 Apr '12, 01:11

p​o​w​e​r​e​d by O​S​Q​A