M BUZZ CRAZE NEWS
// news

Wireshark doesn`t see http

By Jessica Wood

I installed wireshark on ubuntu, run capture on "wlp2s0f0" and load some pages in browser. But when I enter filter http in wireshark, I don`t see anything. What I do wrong and how I can solve this problem?

2

1 Answer

The value http seems to be a valid display filter, and a quick check here seems to work okay:

wireshark with display filter of http

So, perhaps something else is going on here. A couple of things to check:

  • Are you capturing on the correct interface? You can confirm which interface your request would be routed through, via ip route get <ip>
  • Do you see the HTTP requests in the unfiltered view?
  • Do you see any packets in the unfiltered view? By default, all captured packets should be displayed. If you see nothing (and you're sure there's network activity), you may be capturing on the wrong interface.
  • Are you sure that your browser is performing HTTP requests (on port 80), and not HTTPS?
5

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy