Packet sniffer: Difference between revisions
Jump to navigation
Jump to search
mNo edit summary |
|||
| Line 16: | Line 16: | ||
* time stamp: n/a | * time stamp: n/a | ||
[http://www.wireshark.org/ Wireshark] 1.6. | [http://www.wireshark.org/ Wireshark] 1.6.8 | ||
* live sniffer: ok | * live sniffer: ok | ||
* save as file: ok | * save as file: ok | ||
| Line 24: | Line 24: | ||
reference | reference | ||
* [http://wiki.wireshark.org/DisplayFilters DisplayFilters - The Wireshark Wiki] | * [http://wiki.wireshark.org/DisplayFilters DisplayFilters - The Wireshark Wiki] | ||
* [http://www.wireshark.org/docs/man-pages/wireshark-filter.html wireshark-filter - The Wireshark Network Analyzer 1.5.0] | |||
resources | resources | ||
Revision as of 16:44, 6 June 2012
case: try to find mp4 file
keyword filter at URL Snooper v.2.30.01
- full request URI: ex: http://www.example.com/folder/file.mp4 ok
- partial URI path: ex: /folder/file.mp4, file.mp4, mp4 ok
- wildcat: ex: *.mp4 not work
Filter at Wireshark 1.6.5
- full request URI: ex: ip.dst == 127.0.0.1 and http.request.uri matches "upload2/letsgo.mp4" (where the domain www.example.com was mapping to IP: 127.0.0.1) ok
- partial URI path: ex: http.request.uri matches "/folder/file.mp4", http.request.uri matches "file.mp4", http.request.uri matches "mp4" ok
- wildcat: ex: http.request.uri matches "*.mp4" not work
software list
URL Snooper v.2.30.01
- live sniffer: ok
- save as file: n/a
- time stamp: n/a
Wireshark 1.6.8
- live sniffer: ok
- save as file: ok
- time stamp: ok
reference
resources