First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

How can I make tshark to use the custom HTTP headers?

By wireshark, I know how to define custom http headers on GUI. After doing that, the file "custom_http2_header_fields" would be generated.

Then how can I make tshark to recognize this custom http header?

Do I need to put this file to specific directory (I tried the folders of "Personal configuration" as well as "Global configuration" got by command "tshark -G folders", but seems that is helpless)?

Or are there any command line options can do this?

Appreciate your help.

The version of my tshark: 3.6.0.

hanhan2095's avatar
1
hanhan2095
asked 2023-03-08 05:48:15 +0000, updated 2023-03-08 05:49:30 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

The file is called custom_http_header_fields (without the 2) and is to be present in the personal configuration folder, as shown by tshark -G folders. There it is going to be picked up by the HTTP dissector.

Jaap's avatar
13.7k
Jaap
answered 2023-03-08 09:30:49 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer