Basically i want to use wireshark to grab ips in skype but i can't figure out how to get it to do it since i have a proxy and all my skype packets are sent threw the proxy. Anyone know how to do this? Thanks asked 16 Nov '14, 12:42  bdoug101 |
One Answer:
Skype seems to be using "skype" in the User-Agent: header (HTTP) when talking to a proxy, so you could (probably) identify Skype traffic by looking at that header in a capture file.
This will match lower case and upper case sSkype. If you've identified those frame, simply look at the Host: Header and or the URL to identify the servers Skype is try to communicate with. Regards answered 17 Nov '14, 16:15  Kurt Knochner ♦ |
Hello, I am having the same problem ... has a special command to find the exact header? like udp.srcport...
see my answer. It contains everything you need.