This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

HTTP decoding not happening on one system

0

Dear Experts,

We are facing a peculiar problem. We have a pcap which we are able to decode and see the HTTP messages on one system. But on the other system, this is not working.

We checked the ports configured and they are same on both systems. Is there any other configuration to be checked?

Regards, Prashanth

asked 21 Oct '14, 23:24

Prashanth's gravatar image

Prashanth
11112
accept rate: 0%


One Answer:

0

This can have a number of reasons, e.g.

  • Decoding HTTP could be disabled. Check the "Analyze" -> "Enabled Protocols" dialog to see if decoding HTTP is enabled
  • TCP reassembly can do unexpected things to your decoding. Check in "Edit" -> "Preferences" -> "Protocols" -> "TCP" to see if "Allow subdissector to reassemble TCP streams" is the same on both systems

answered 22 Oct '14, 01:53

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%