This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How can I tell which HTTP GET a particular response belongs to?

0

I would like to know which HTTP GET relates to which response. Is there somewhere in the TCP packet that references the GET and is included in the response? For example, if there are five GET requests and only one response, is there a way to determine what GET it corresponds to?

asked 14 Feb '12, 10:21

Ezat's gravatar image

Ezat
21225
accept rate: 0%

edited 14 Feb '12, 10:47

multipleinterfaces's gravatar image

multipleinte...
1.3k152340


3 Answers:

2

Without HTTP pipelining, there will be only one request at a time in each TCP session, so when you look in one TCP session (same IP addresses/TCP ports combination), each response will be for the request before it.

When HTTP pipelining is used (not used much), there can be multiple requests following each other in one TCP session. The responses then correspond chronologically to the requests.

answered 14 Feb '12, 10:42

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Very much appreciated Sake, so if I understood the order is sequential and I don't have to worry about which Response belong to which GET just following the stream downhill, do you think there is a way to see the speed of webpage loading other than using Firebug just by adding all the packets time.

(14 Feb '12, 11:24) Ezat

0

To find the time taken to load a webpage, you can take the difference of first request packet and last response for that HOST

BEGIN_TIME = packet.getCaptureHeader().timestampInMillis(); for first request (source:jNetPcap library)
FINISH_TIME = packet.getCaptureHeader().timestampInMillis(); for last response packet

time to load the webpage = FINSIH_TIME - BEGIN_TIME

answered 14 Feb '12, 11:58

Rhiya's gravatar image

Rhiya
0335
accept rate: 0%

edited 14 Feb '12, 12:00

multipleinterfaces's gravatar image

multipleinte...
1.3k152340

is this a filter, looks like methods in programmming, sorry I don't script @ the moment, where do I plugg these lines in filters.

(14 Feb '12, 12:25) Ezat

0

Highlight the GET request and select analyze; Follow TCP Stream. That should help

answered 15 Feb '12, 11:20

dixglata's gravatar image

dixglata
1
accept rate: 0%