This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Truncated URI in the Wireshark UI

0

Long URIs are truncated in the Wireshark UI by default, even when the capture was run with tshark which does not limit the snaplen. I can view the full URI on the command-line using tshark and pulling out the http.request.uri. Is it possible to override whatever causes the truncation in the Wireshark UI? None of the options I came across in the UI seemed to lend itself to making this possible. I also did a recursive search under the Wireshark installation directory and nothing stood out.

asked 29 Dec '11, 13:36

devrick0's gravatar image

devrick0
1333
accept rate: 0%


One Answer:

0

If you're referring to the URI being truncated in the packet details pane, then that is likely the result of the URI being longer than the maximum number of characters allowed, which is currently specified by ITEM_LABEL_LENGTH as 240 in epan/proto.h.

This topic recently came up on the wireshark-user mailing list. You might want to subscribe to it if you haven't already.

answered 29 Dec '11, 16:28

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%