Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Wireshark reassembles TCP Segments. For teaching purposes, I'd like to see the actual packets (not the reassembled TCP Segments) that flow on a network when you access a webpage.

Can I do that with Wireshark? If not, can you suggest a free program that will let me see the basic, fundamental packets?

share|improve this question
add comment

migrated from stackoverflow.com Aug 25 '11 at 15:01

This question came from our site for professional and enthusiast programmers.

2 Answers

If you want to view only http packets in wireshark

  • Start the wireshark
  • Select your network adaptor
  • In Filter box enter 'http' and then apply.
share|improve this answer
add comment

This can help you filter out non-HTTP traffic. Then you can simply look at the packets:

6.1. Viewing packets you have captured

Once you have captured some packets, or you have opened a previously saved capture file, you can view the packets that are displayed in the packet list pane by simply clicking on a packet in the packet list pane, which will bring up the selected packet in the tree view and byte view panes.

You can also disable packet reassembling as shown here. Fiddler may also be a good choice if you want to look at HTTP layer.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.