Ethereal

[Ethereal-users] decoding HTTP other than port 80
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: November 2003


I have to look through tons of http traffic captured with tcpdump.

It is mostly http traffic where the webserver http ports are >1999 and <3000.

I need to get the packets decoded as HTTP and can use the user defined decodes for the ports, though it's extremely time consuming.

Is there any way to pre-build or save the user defined decodes so I can use them between sessions? Right now when I close ethereal I loose my user defined decodes.

Am I going about this the wrong way? Is there anything besides writing a custom dissector?





Powered by MHonArc 2.6.10