This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

HTTP decoding not happening on one system

Dear Experts,

We are facing a peculiar problem. We have a pcap which we are able to decode and see the HTTP messages on one system. But on the other system, this is not working.

We checked the ports configured and they are same on both systems. Is there any other configuration to be checked?

Regards, Prashanth

http decoding

asked 21 Oct '14, 23:24

Prashanth
11●1●1●2
accept rate: 0%

One Answer:

This can have a number of reasons, e.g.

Decoding HTTP could be disabled. Check the "Analyze" -> "Enabled Protocols" dialog to see if decoding HTTP is enabled
TCP reassembly can do unexpected things to your decoding. Check in "Edit" -> "Preferences" -> "Protocols" -> "TCP" to see if "Allow subdissector to reassemble TCP streams" is the same on both systems

answered 22 Oct '14, 01:53

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%