Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to capture the network traffic of my host through wireshark and need to get the source and destination ip addresses from the packets. The problem I am facing is that I am behind Proxy Server and I get the IP of proxy as the destination IPs. However, I want to get the IP address of the actual server that is accessed through my host.

Is it possible that I can get the actual destination IPs instead of Proxy's IP.

share|improve this question

migrated from stackoverflow.com May 7 '13 at 10:43

This question came from our site for professional and enthusiast programmers.

1  
If it's HTTP traffic, the proxy might put the original client IP in an HTTP request header. Other than that, it's not possible. – Barmar May 7 '13 at 6:46
    
ok is there any way to capture the traffic over proxy server to include both actual source and destination IP Addresses?? May be some kind of configuration in the Server – Faheem May 7 '13 at 9:50
    
You need to do the capture on the proxy server itself. Or if the outside interface of the proxy is connected to a switch, you can put the sniffer on a monitoring port of the switch so it will see all the traffic. – Barmar May 7 '13 at 10:09

You must log in to answer this question.