Wireshark-users: Re: [Wireshark-users] Not seeing SSL protocol packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Sat, 28 Feb 2009 17:55:46 -0700
On Fri, Feb 27, 2009 at 10:53:15PM +0000, linkoff@xxxxxxxxxxx wrote:

> Interesting enough, Microsoft Network Monitor 3.2 can see the packets 
> with a "Protocol Name" of SSL. This network analyzer also has a "Frame 
> Details" window showing this:

> + Tcp: Flags=...AP..., SrcPort=1056, DstPort=HTTP Alternate(8080),

By default, Wireshark recognizes port 8080 as standard HTTP.  You can 
change this by going into the Preferences (under the Edit menu), down to 
Protocol Preferences, then to HTTP.  Remove 8080 from the list of TCP 
ports recognized as HTTP and add it to the SSL/TLS ports list.


Steve