This is our old Q&A Site. Please post any new questions and answers at

Dear Experts,

We are facing a peculiar problem. We have a pcap which we are able to decode and see the HTTP messages on one system. But on the other system, this is not working.

We checked the ports configured and they are same on both systems. Is there any other configuration to be checked?

Regards, Prashanth

asked 21 Oct '14, 23:24

Prashanth's gravatar image

accept rate: 0%

This can have a number of reasons, e.g.

  • Decoding HTTP could be disabled. Check the "Analyze" -> "Enabled Protocols" dialog to see if decoding HTTP is enabled
  • TCP reassembly can do unexpected things to your decoding. Check in "Edit" -> "Preferences" -> "Protocols" -> "TCP" to see if "Allow subdissector to reassemble TCP streams" is the same on both systems
permanent link

answered 22 Oct '14, 01:53

Jasper's gravatar image

Jasper ♦♦
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 21 Oct '14, 23:24

question was seen: 864 times

last updated: 22 Oct '14, 01:53

p​o​w​e​r​e​d by O​S​Q​A