Re: [Ethereal-users] NO HTTP TRAFFIC IN CAPTURE

[LEGO <luis.ontanon@xxxxxxxxx>]

On 6/8/05, Alexandre Rafalovitch <arafalov@xxxxxxxxx> wrote:
> Malcolm,
> 
> Have you tried doing some requests yourself and trying to find them in
> the Ethereal trace? Is your http traffic going to port 80? If it does
> not (e.g. :8080 or :8880), then Ethereal will not know it is HTTP and
> you will need to explicitly 'decode' it.

Actually the HTTP dissector sees as its own traffic in the following ports:

#define TCP_PORT_HTTP			80
#define TCP_PORT_PROXY_HTTP		3128
#define TCP_PORT_PROXY_ADMIN_HTTP	3132
#define TCP_ALT_PORT_HTTP		8080
#define TCP_RADAN_HTTP			8088
#define TCP_PORT_HKP			11371
#define TCP_PORT_DAAP			3689

other than these, from the preferences you can actually change the
alternate port.
 
> Regards,
>    Alex.
> 
> On 6/8/05, Malcolm Nicol <malcolm.nicol@xxxxxxxxxxxxx> wrote:
> >
> > All
> >
> > Problem : ethereal installed on span port on cisco 4506 chassis model,
> > getting loads of stuff from arp, stp,NBMS,EIGRP,DNS,TCP and UDP however this
> > is the problem i dont seem to be seeing any http traffic, slightly worries
> > me because what else am i missing on network, i want to capture everything i
> > mean everything
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan