Re: How does wireshark know which is the http response for a given request?

[Jeff Morriss <jeff.morriss.ws () gmail com>]

On 11/13/2014 02:08 AM, Mohamed Lrhazi wrote:
> Don't really have much more to add to the subject line :)

It appears the HTTP dissector simply marks the next non-request message 
as being the response to the previous request.  That is, is there's a 
request followed by a non-request message in the other direction then 
that message is the response to the request.

I'd guess this works because HTTP is a request-response protocol (i.e., 
you can't make multiple requests on a given TCP connection without 
waiting for a response).  (Admittedly I don't know much about HTTP.)

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe