Re: [Wireshark-users] URL capture filer??

That willl work. I really appreciate it. Thank you and to everybody who responded. Stephen Fisher <[EMAIL PROTECTED]> wrote: On Mon, Feb 04, 2008 at 03:45:56PM -0800, jacob c wrote: > I just wanted/assumed Wireshark would read the http header for > www.cnn.com and then capture accordin

Re: [Wireshark-users] URL capture filer??

On Mon, Feb 04, 2008 at 03:45:56PM -0800, jacob c wrote: > I just wanted/assumed Wireshark would read the http header for > www.cnn.com and then capture accordingly. That was my goal. Is there a > way to do that if I am using a proxy? As Guy stated, you cannot do this in a capture filters. How

Re: [Wireshark-users] Missing Capture filters

On Sat, Feb 02, 2008 at 09:22:51AM -0900, The Mathe Family wrote: > I do not seem to have a default lits of capture filters in my capture > filters list. Any suggestions? Are you running on Windows or Unix? The global capture filters are saved in /usr/local/share/wireshark/cfilters on Unix an

Re: [Wireshark-users] SSL decryption

SARAVANA PERUMAL RAMAKRISHNAN <[EMAIL PROTECTED]> writes: > > > Hello, >     > I'm trying to collect soap traces using wireshark. The application is running in > a solaris machine and i access the GUI for this application through a web > browser in my windows PC. As soon as i enter the appl

Re: [Wireshark-users] URL capture filer??

jacob c wrote: > I just wanted/assumed Wireshark would read the http header for > www.cnn.com and then capture accordingly. No. "host XXX" in libpcap/WinPcap (the library that Wireshark/TShark - and a *lot* of other software, including tcpdump/WinDump - uses to capture tr

Re: [Wireshark-users] URL capture filer??

Interesting. I didn't realize that Wireshark was trying to resolve www.cnn.com or even why he would?? We use a proxy at this site, http, https, dns, ftp, requests are sent to the proxy. For example, an an nslookup fails for www.cnn.com but of course IE can resolve and get there through the

Re: [Wireshark-users] URL capture filer??

jacob c wrote: > I have attached two jpg screenshots so you can see what I typed in and > then the error I get. Please let me know what I'm doing wrong. As the message says, "unknown host 'www.cnn.com'"; Wireshark's unable to find the IP address corresponding to the domain name "www.cnn.com". C

Re: [Wireshark-users] Missing Capture filters

The Mathe Family wrote: > I do not seem to have a default lits of capture filters in my capture > filters list. Any suggestions? AFAIK there is no default list of capture filters, you pretty much have to type what you want in there. (There are some exceptions: for example if Wireshark detect

Re: [Wireshark-users] URL capture filer??

On Mon, Feb 04, 2008 at 08:22:16AM -0800, jacob c wrote: > I am running Wireshark 0.99.7. I tried using the sample URL capture > filter shown on the wiki but it always gives me an error when I > stopped the capture.. It looks like this: "host www.cnn.com and not > (port 80 or port 25) " I also

[Wireshark-users] URL capture filer??

Hello, I am running Wireshark 0.99.7. I tried using the sample URL capture filter shown on the wiki but it always gives me an error when I stopped the capture.. It looks like this: "host www.cnn.com and not (port 80 or port 25) " I also tried "host www.cnn.com" but it didn't seem to lik