[Josh <mobile@xxxxxxxxxxxx>]

Okay, thanks.  That certainly sounds like it would filter out all the UDP and other stuff I don't want.  

What would I look for to find -submitted- data?  I see there are GET headers... Are there POST headers for that kind of traffic?


-----Original Message-----
From: "Jaap Keuter" <jaap.keuter@xxxxxxxxx>
To: "Ethereal user support" <ethereal-users@xxxxxxxxxxxx>
Sent: 6/13/06 12:15 PM
Subject: RE: [Ethereal-users] Export decoded html source  to separate file

Hi,

Ehhh, you could enter a display filter 'http'.
Furthermore you could look into follow TCP stream option, although that
won't help you with gzipped content :/

Thanx,
Jaap


On Tue, 13 Jun 2006, Josh wrote:

> Thanks!  I'm away from my computer and will try that when I get home.
>
> This is prolly a stupid question, but is there a better way to sort
> through the literally thousands of packets to find web pages?
>
> Right now I sort by content and look for the HTTP1.0/OK or whatever the
> exact term is.  Am I going to miss some by doing it that way?
>
> Also, i'm trying to capture outbound traffic... For example, a post
> submitted to a message board or a submitted form.  Using my
> sort-by-conteht method, would I be able to capture those, or is there a
> better way?
>
> Don't want to flood the group with tons of nb questions, so my
> apologies if this is OT.  I figured most of it out- just need to know
> how to digest this list of a gazillion packets.
>
>
> -----Original Message-----
> From: "Jaap Keuter" <jaap.keuter@xxxxxxxxx>
> To: "Ethereal user support" <ethereal-users@xxxxxxxxxxxx>
> Sent: 6/13/06 10:22 AM
> Subject: Re: [Ethereal-users] Export decoded html source  to separate file
>
> Hi,
>
> Select the HTTP content by selecting the Line-based text data line.
> This presents the decoded data in the lower pane and selects them all.
> Then right click somewhere on the right side in the lower pane and select
> Export selected bytes... Then all bytes of the payload can be exported to
> a file which you can call foo.html. Open foo.html in you webbrowser and if
> all is there the page appears.
>
> Oke, it clumsy, but for simple pages it works.
>
> Thanx,
> Jaap
>
> On Tue, 13 Jun 2006, Josh wrote:
>
> > I have some captured packets containing web pages with html and
> > gzipped content. I've figured out how to view the gzipped data as html
> > text using the HTML section of the Tree view. But instead of reading source
> > html, I'd like to see the rendered page. Is there a way to export the
> > decoded html shown in that section of the tree to a separate file (for
> > example .htm) so I can view it in a browser? Or is there a part of
> > Ethereal that will display this content natively, that I haven't seen?
> > Windows user (and newbie) by the way. Thanks!
> >
> >
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users