Wireshark · Wireshark-users: Re: [Wireshark-users] HTTP filter

[David Alanis <canito@xxxxxxxx>]

Andrej-

That's a good question.

I know in Wireshark under edit > preferences > protocols > HTTP you
define which ports should be displayed as HTTP in the GUI.

But maybe ultimately the /usr/share/wireshark/services file determines
what port will be treated as that specific type of traffic?

http://wiki.wireshark.org/Hyper_Text_Transfer_Protocol

Cheers-
David


On Mon, 2011-01-03 at 17:17 +0900, Andrej van der Zee wrote:
> Hi,
> 
> 
> I was wondering how wireshark implements the HTTP filter. Does it just
> look at the destination port only?
> 
> 
> Cheers,
> Andrej
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe