- Subject: [Ethereal-users] decoding HTTP other than port 80
- From: Andrew Lewis <andrew@xxxxxxxxxxx>
- Date: Mon, 03 Nov 2003 11:38:54 -0500
I have to look through tons of http traffic captured with tcpdump.
It is mostly http traffic where the webserver http ports are >1999 and
<3000.
I need to get the packets decoded as HTTP and can use the user defined
decodes for the ports, though it's extremely time consuming.
Is there any way to pre-build or save the user defined decodes so I can
use them between sessions? Right now when I close ethereal I loose my
user defined decodes.
Am I going about this the wrong way? Is there anything besides writing
a custom dissector?