Ethereal-users: Re: [Ethereal-users] Decode as a different protocol

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 11 Jul 2005 21:53:16 +0200
Nida, Bob wrote:

> Our MS- ISA Proxy Admin has selected a port different from 80 or 8080
> as the default port for proxy services.  The proxy server is ISA 2003
> (2003 I believe).
>
> NAI Sniffer automatically decodes the proxy activity and formats it
> into a useful means for diagnosis.
>
> I have not been able to convince Ethereal to decode this port as MC
> Proxy.  I use Ethereal and now prefer it over NAI Sniffer.  This is
> about the only thing I can' use Ethereal for.
>
> Help on getting Ethereal to decode this TCP port as MS Proxy?
>
Well, use the "Decode As" feature :-)

See:
http://www.ethereal.com/docs/user-guide/ChAdvProtocolDissectionSection.html#ChAdvDecodeAs

Unfortunately, you can't save the setting, so you'll have to set it each
time you start Ethereal.

Regards, ULFL