Wireshark-users: [Wireshark-users] HTTP not decoded

From: Srivats P <pstavirs@xxxxxxxxx>

Date: Wed, 3 Nov 2010 21:00:49 +0530

Hi,

Wireshark does not seem to decode TCP port 80 as HTTP for the attached
pcap file - instead it shows the HTTP data as "TCP segment data".

Is this expected behaviour? Is it because the file does not contain
the TCP handshake packets?

Using Wireshark Version 1.2.1 (SVN Rev 29141) on Windows.

Regards,
Srivats

Attachment: sample.pcap
Description: Binary data

Follow-Ups:
- Re: [Wireshark-users] HTTP not decoded
  - From: Marco Simone Zuppone
- Re: [Wireshark-users] HTTP not decoded
  - From: M Holt
- Re: [Wireshark-users] HTTP not decoded
  - From: Prigge Scott
- Re: [Wireshark-users] HTTP not decoded
  - From: Sake Blok

Prev by Date: [Wireshark-users] Generate same query of Wireshark IO graph into Tshark
Next by Date: Re: [Wireshark-users] HTTP not decoded
Previous by thread: Re: [Wireshark-users] Generate same query of Wireshark IO graph into Tshark
Next by thread: Re: [Wireshark-users] HTTP not decoded
Index(es):
- Date
- Thread