Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to capture the network traffic of my host through wireshark and need to get the source and destination ip addresses from the packets. The problem I am facing is that I am behind Proxy Server and I get the IP of proxy as the destination IPs. However, I want to get the IP address of the actual server that is accessed through my host.

Is it possible that I can get the actual destination IPs instead of Proxy's IP.

share|improve this question

migrated from May 7 '13 at 10:43

This question came from our site for professional and enthusiast programmers.

If it's HTTP traffic, the proxy might put the original client IP in an HTTP request header. Other than that, it's not possible. – Barmar May 7 '13 at 6:46
ok is there any way to capture the traffic over proxy server to include both actual source and destination IP Addresses?? May be some kind of configuration in the Server – Faheem May 7 '13 at 9:50
You need to do the capture on the proxy server itself. Or if the outside interface of the proxy is connected to a switch, you can put the sniffer on a monitoring port of the switch so it will see all the traffic. – Barmar May 7 '13 at 10:09

You must log in to answer this question.