Re: HTTP filter

[Stephen Fisher <steve () stephen-fisher com>]

On Mon, Jan 03, 2011 at 05:17:21PM +0900, Andrej van der Zee wrote:

> I was wondering how wireshark implements the HTTP filter. Does it just 
> look at the destination port only?

The display filter "http" displays all packets handled by the HTTP 
dissector.  The HTTP dissector will work on packets meeting one of these 
criteria:

 - One of the ports from the "TCP Ports" HTTP preference

 - One of the ports from the "SSL/TLS Ports" HTTP preference

 - Another dissector that uses HTTP on a different port such as IPP
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe