Ethereal-users: Re: [Ethereal-users] May I ask a question???

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 3 Feb 2001 18:43:15 -0800
On Sat, Feb 03, 2001 at 10:51:39PM +0900, ������ wrote:
> Hello!!
> Now I am studying  ethereal..
> I would like to be filtering "Http".
> How do I do??

When capturing packets, or after you've captured the packets?

When capturing the packets, you'd need to specify the port numbers on
which you'll be seeing the traffic; typically, HTTP traffic goes on port
80, so you'd specify a capture filter of "tcp port 80".

If you already have a capture, and you want to see which of the packets
in that capture are HTTP packets, you'd use a display filter of "http".