I'm a .NET developer who's used to using fiddler. I'm trying just see the traffic from a web service running on my local machine and a specific web service. When I hit this web service from an ASP.NET website running in Visual Studio I can see the traffic in fiddler.
I'm trying to hit the same web service from a Java application and for some reason the traffic doesn't show up in fiddler, event thought I have filters turned off and I have exempt all set in WinConfig.
I figured that my Java application and my web service would probably show up in Wireshark so I decided to give that a try. When I run Wireshark it seems like it's showing me all kinds of traffic. I tried adding a capture filter
http.host contains "mywebservicefullyqualifiedhostname"
But I keep seeing traffic going to many different ip addresses. I used nslookup to check into some of these ip addresses and none of them are my web service.
I removed the https.host contains filter and and added these two capture filters:
src host 184.108.40.206 host 220.127.116.11
Where src 18.104.22.168 is my ip address and 22.214.171.124 is the ip address I'm connecting to, but it's still showing bunches of other ip addresses when I start capturing traffic in Wireshark.
Is there anyway to add a host name to the columns in Wireshark? Are the capture filters in Wireshark a list of things to exclude? Looking at the default capture filters in Wireshark it doesn't appear so e.g.
not port 80 and not port 25 and host www.wireshark.org