I am capturing HTTP GET traffic with Wireshark and I have plenty of URLs that contain "cryptic" URL-encoded data.
I'd like to
- see the URI split into the individual parameters
- see the parameter values in plain text
Example: Today I see in Wireshark:
GET /index.xml?MODE=%40&MAC=63%3AA8%3A42%3AC0%3AE0%3AFD
And I'd like to see something like
MODE=@
MAC=63:A8:42:C0:E0:FD
How is that possible in Wireshark?
I have tried
- expanding the
GET
part in Wireshark - right-clicking, decode as...
I know how to decode the URL e.g. with MIME-tools in Notepad++ or in online decoders, but I'd not like to do this for dozens of URLs.