Thanks all for your responses, alas i made the mistake myself.
A lesson learned, when you unplug the firewall from lan make sure you put it back in same port on switch it does help, makes a big difference when you have the port configured as a mirror.
thanks for your quick responses
mal
-----Original Message-----
From: LEGO [mailto:luis.ontanon@xxxxxxxxx]
Sent: 08 June 2005 16:22
To: Alexandre Rafalovitch; Ethereal user support
Subject: Re: [Ethereal-users] NO HTTP TRAFFIC IN CAPTURE
On 6/8/05, Alexandre Rafalovitch <arafalov@xxxxxxxxx> wrote:
> Malcolm,
>
> Have you tried doing some requests yourself and trying to find them in
> the Ethereal trace? Is your http traffic going to port 80? If it does
> not (e.g. :8080 or :8880), then Ethereal will not know it is HTTP and
> you will need to explicitly 'decode' it.
Actually the HTTP dissector sees as its own traffic in the following ports:
#define TCP_PORT_HTTP 80
#define TCP_PORT_PROXY_HTTP 3128
#define TCP_PORT_PROXY_ADMIN_HTTP 3132
#define TCP_ALT_PORT_HTTP 8080
#define TCP_RADAN_HTTP 8088
#define TCP_PORT_HKP 11371
#define TCP_PORT_DAAP 3689
other than these, from the preferences you can actually change the
alternate port.
> Regards,
> Alex.
>
> On 6/8/05, Malcolm Nicol <malcolm.nicol@xxxxxxxxxxxxx> wrote:
> >
> > All
> >
> > Problem : ethereal installed on span port on cisco 4506 chassis model,
> > getting loads of stuff from arp, stp,NBMS,EIGRP,DNS,TCP and UDP however this
> > is the problem i dont seem to be seeing any http traffic, slightly worries
> > me because what else am i missing on network, i want to capture everything i
> > mean everything
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs Email
Security System.
http://www.messagelabs.com
________________________________________________________________________
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs Email
Security System.
http://www.messagelabs.com
________________________________________________________________________