This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Dear Experts,

We are facing a peculiar problem. We have a pcap which we are able to decode and see the HTTP messages on one system. But on the other system, this is not working.

We checked the ports configured and they are same on both systems. Is there any other configuration to be checked?

Regards, Prashanth

asked 21 Oct '14, 23:24

Prashanth's gravatar image

Prashanth
11112
accept rate: 0%


This can have a number of reasons, e.g.

  • Decoding HTTP could be disabled. Check the "Analyze" -> "Enabled Protocols" dialog to see if decoding HTTP is enabled
  • TCP reassembly can do unexpected things to your decoding. Check in "Edit" -> "Preferences" -> "Protocols" -> "TCP" to see if "Allow subdissector to reassemble TCP streams" is the same on both systems
permanent link

answered 22 Oct '14, 01:53

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×293
×15

question asked: 21 Oct '14, 23:24

question was seen: 814 times

last updated: 22 Oct '14, 01:53

p​o​w​e​r​e​d by O​S​Q​A