This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture filter host doesn’t capture http or https packets

0

I'm trying to capture all traffic to and from a specific host. I created a capture filter as follows: host <ip address>. The capture filter seems to work because ping and ssh packets are captured. However, when I use a browser (Chrome, IE, or Firefox), I'm unable to capture packets using HTTP or HTTPS. What's going on?

asked 04 Oct '16, 11:53

vlm's gravatar image

vlm
6113
accept rate: 0%


One Answer:

1

Are you using a proxy? If so, all your HTTP/HTTPS traffic is sent there, so if you exclude it with an IP address filter you'll not see any of it.

answered 04 Oct '16, 12:04

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Jasper, I do forward to a proxy server. I excluded the IP address and got it to work. Thank you very much.

(04 Oct '16, 12:21) vlm