Title: RE: [Ethereal-users] New Feature
Hi,
Thanks for the reply.
I'm not sure I understand your inputs.
attached is a screen capture of the Ethereal window with HTTP traffic.
The window is combine from 3 sub-windows
On the upper, I can see a list of all HTTP packets
On the middle, I can see information on the select HTTP packet
On the bottom, I can see 0/1 on the select HTTP packet
From the feature explanation, I thought that I'll have a [+] on the upper windows so I'll see all the response under the GET.... The [+] on the middle ([+} Hypertext Transfer Protocol) was there in previous version as well.
<<Ethereal Screen Capture.jpg>>
Regards,
Idan
-----Original Message-----
From: Guy Harris [mailto:gharris@xxxxxxxxx]
Sent: Tuesday, July 08, 2003 8:23 PM
To: Binder Idan
Cc: 'ethereal-users@xxxxxxxxxxxx'
Subject: Re: [Ethereal-users] New Feature
On Mon, Jul 07, 2003 at 01:23:49PM +0300, Binder Idan wrote:
> Under "New and updated features" the following new feature is written:
> "The HTTP, FTP, POP, SMTP, IMAP, and ACAP requests and responses are
> now shown in the protocol tree."
>
> Can you please explain what the new feature is? I snooped some HTTP
> traffic, but I do not see any different between the old version 0.9.11
> to the new 0.9.13.
There's now a '[+]' box next to the first protocol tree entry of an HTTP request. Prior to 0.9.13, there wasn't one; now there is, and if you use it to open up that line, there's a "Request Method" entry giving the method (which you can use to filter).
That was done to some other protocols.
For some other protocols, those subfields of a request/response line were already there, so, instead, we added a protocol tree entry for the entire line, and put the subfields below it, so that those protocols work the way the other ones do.
Attachment:
Ethereal Screen Capture.jpg
Description: JPEG image
