Wireshark · Ethereal-users: Re: [Ethereal-users] http.request display filter

[ethereal@xxxxxxxxx]

Guy Harris writes:
> If you use Ethereal, does it show that packet as being HTTP, or just
> TCP?  If it shows it as TCP, the packet was never given to the HTTP
> dissector, and therefore Ethereal doesn't know it's HTTP.
> 
> The HTTP dissector only knows about certain ports being used for HTTP. 
> Ethereal will not automagically identify all HTTP traffic as such.
> 
> The next release will probably have a UI mechanism to allow you to
> specify, on the fly, additional port numbers to be used for particular
> protocols.

Ethereal doesn't see that it's HTTP.  I guess the "certain ports"
problem is what's biting me.  Thanks for the quick reply.