This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am currently using WireShark to analyze the java web start. When the jnlp is running, it requires some jar files. When I open Java Control Panel -> Java Cache Viewer -> Resources, I see there are (e.g) 20 jar files is downloaded (the cache is cleared before launching the jnlp).

But in WireShark display, I just find out (e.g) 17 jar files.

And this is my filter expression : ip.dst == {myip} && media

So what could be the problem or do I miss something ?

Thank you very much.

asked 07 Oct '13, 21:24

Tam%20Thai's gravatar image

Tam Thai
16114
accept rate: 0%


And this is my filter expression : ip.dst == {myip} && media

I don't know what the filter media does, but it might be better to look for the Content-Type of JAR and/or JNLP "files".

JAR files:

http.content_type contains "java-archive" or http.content_type contains "x-jar"

JNLP files:

http.content_type contains "x-java-jnlp-file"

Regards
Kurt

permanent link

answered 10 Oct '13, 14:45

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×549
×349
×16

question asked: 07 Oct '13, 21:24

question was seen: 3,948 times

last updated: 10 Oct '13, 14:45

p​o​w​e​r​e​d by O​S​Q​A