I first cleared all the cookies in my browser. Then I went to www.yahoo.com. Mean while wireshark was capturing. In the search field of the wireshark, I entered http.set_cookie. But the filtered packets do not show all the cookies that are set in the browser. For example, the cookies shown(in wireshark) in the domain in.yahoo.com is only fpc. Where as in the browser 6 more cookies are set in that domain(like fpps, fpc_s, fpt etc) asked 19 Apr '12, 22:02  Ashwin edited 19 Apr '12, 22:03 |
One Answer:
Wireshark will not be able to capture any set_cookie commands that were sent encrypted over HTTPS. Since some websites will change from HTTP to HTTPS for "sensitive" transactions, please check to see whether there was HTTPS traffic which might have set the cookies. This is especially true if you logged into Yahoo with your ID and password during the session. It is also possible for cookies to be set by javascript commands embedded in an HTML page, which your search filter may not detect. answered 20 Apr '12, 01:11  inetdog |
