This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I would like to know which HTTP GET relates to which response. Is there somewhere in the TCP packet that references the GET and is included in the response? For example, if there are five GET requests and only one response, is there a way to determine what GET it corresponds to?

asked 14 Feb '12, 10:21

Ezat's gravatar image

Ezat
21225
accept rate: 0%

edited 14 Feb '12, 10:47

multipleinterfaces's gravatar image

multipleinte...
1.3k152340


Without HTTP pipelining, there will be only one request at a time in each TCP session, so when you look in one TCP session (same IP addresses/TCP ports combination), each response will be for the request before it.

When HTTP pipelining is used (not used much), there can be multiple requests following each other in one TCP session. The responses then correspond chronologically to the requests.

permanent link

answered 14 Feb '12, 10:42

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Very much appreciated Sake, so if I understood the order is sequential and I don't have to worry about which Response belong to which GET just following the stream downhill, do you think there is a way to see the speed of webpage loading other than using Firebug just by adding all the packets time.

(14 Feb '12, 11:24) Ezat

To find the time taken to load a webpage, you can take the difference of first request packet and last response for that HOST

BEGIN_TIME = packet.getCaptureHeader().timestampInMillis(); for first request (source:jNetPcap library)
FINISH_TIME = packet.getCaptureHeader().timestampInMillis(); for last response packet

time to load the webpage = FINSIH_TIME - BEGIN_TIME

permanent link

answered 14 Feb '12, 11:58

Rhiya's gravatar image

Rhiya
0335
accept rate: 0%

edited 14 Feb '12, 12:00

multipleinterfaces's gravatar image

multipleinte...
1.3k152340

is this a filter, looks like methods in programmming, sorry I don't script @ the moment, where do I plugg these lines in filters.

(14 Feb '12, 12:25) Ezat

Highlight the GET request and select analyze; Follow TCP Stream. That should help

permanent link

answered 15 Feb '12, 11:20

dixglata's gravatar image

dixglata
1
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×293

question asked: 14 Feb '12, 10:21

question was seen: 10,394 times

last updated: 15 Feb '12, 11:20

p​o​w​e​r​e​d by O​S​Q​A