This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to find request based on the http code

0	I have filtered the http 500 code requests using http.response.code == 500. but i would like to see which request got the http 500. how do i filter this. thanks filter asked 15 Jul '14, 11:49 scara 31●9●9●14 accept rate: 0%

2 Answers:

The field http.request_in contains the packet number of the request. If you expand the 'Hypertext Transfer Protocol' node in the packet details pane you should see the field [Request in frame: xxx], which is double-clickable to take you straight to the request. You can also right-click the field and select Go to Corresponding Packet to do the same.

The inverse also applies in the request which has the field http.response_in, shown as [Response in frame: xxx]

answered 15 Jul '14, 13:07

grahamb ♦
19.8k●3●30●206
accept rate: 22%

Thanks it was useful but for some http 500 requests i only see next request in frame and next response in frame. Some have Prev response in frame,Request in frame , Next request in frame, Next response in frame. why is it like this?

(15 Jul '14, 19:18) scara

0	right click the '500' frame and select 'Follow TCP Stream'. That should work in most cases. Regards Kurt answered 15 Jul '14, 12:54 Kurt Knochner ♦ 24.8k●10●39●237 accept rate: 15%