First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

why wireshark is not showing http or https packets in the view?

Hi, Why wireshark is not showing http or https packets in the capture view? I have been browsing and facebook and other websites to generate http(s) traffic but I don't see any http(s) traffic..However I see all those browsed sites under TCP and TLS protocols...I am on Ubutun by the way.

Any help would be appreciated!

Thank you.

updated 2018-04-29 10:56:18 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Plain http is shown if present and recognized in a TCP packet and http dissection is not disabled, so if you have a http communication and can see the text inside the packet bytes but the packet is not marked as http one, the dissector must have been disabled or maybe the server uses an exotic port number.

HTTPS means HTTP over TLS, so unless you have the data necessary to decipher the TLS into plaintext, Wireshark cannot dissect the encrypted contents, so the highest layer protocol recognized in the packet (which is what is displayed in packet list as packet protocol) remains TLS.

sindy's avatar
6.2k
sindy
answered 2018-04-29 11:33:24 +0000
edit flag offensive 0 remove flag delete link

Comments

Hi, The dissector is enabled. All http POST transactions are under OCSP Protocol...It is basically not showing http GET requests at all....Even if I browse 10 or more websites, there is no GET requests shown...

DGurkha's avatar DGurkha (2018-04-29 15:44:42 +0000) edit

Can you post the capture on Cloudshark or any plain file sharing service and edit your Question wih a login-free link to it? Debugging on screenshots is considered tough, but debugging on descriptions is... well... even more tough :-D

sindy's avatar sindy (2018-04-29 17:27:49 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer