This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm attempting to debug an issue where a iPhone client throws an error that seems to indicate the http response was not received when hitting my API. When comparing traffic of the bad case to the good ones I notice that even in the cases where this works for other clients my wireshark does not have an HTTP response listed for the call in question and the request contains no "Response in Frame:" link. If I use the follow TCP stream I see the response. If I dig through the TCP entries I see a reassembled PDU with the HTTP 201 response and the appropriate JSON payload. But there is no HTTP capture entry showing the response. Again, this is a case in which the client was able to receive and process the response, but I wonder if it's pointing to some anomaly that could help explain the issue I'm seeing.

When I look at the logs from the failed test from the iPhone, the HTTP request entry contains a "Response in frame" link to an HTTP 204 No Content, which is not the correct response but is rather a response from a previous HTTP call in the same stream. This is reinforced by follow TCP stream feature which again properly shows the appropriate HTTP 201 response with the correct payload.

So my questions are these: 1) Is it normal for Wireshark to not log an HTTP response that was clearly sent? 2) Is it normal for Wireshark to misidentify the HTTP response in the "Reponse in frame" link? 3) Are these likely symptoms of my problem or simply artifacts of how http or wireshark works?

asked 30 Jan '15, 11:31

bennoffsinger's gravatar image

bennoffsinger
1111
accept rate: 0%

Did you ever get a response on this or figure out how to see the HTTP response code? I'm having the same problem, but I'm running over HTTPS so it becomes a little more complicated -- Wireshark isn't decoding the response packet, but it decoding the request packet.

(21 Apr '16, 12:23) Hossy923
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×293
×42
×40
×1

question asked: 30 Jan '15, 11:31

question was seen: 2,863 times

last updated: 21 Apr '16, 12:24

p​o​w​e​r​e​d by O​S​Q​A