Sign in to follow this  
Followers 0
Mario

Ethereal and packet sniffing

4 posts in this topic

I have own computers, I'll call them A and B. A is viewing webpages. B is using ethereal and can see the packets of the webpages.

Is there a way to translate http ethereal packets into webpages?

0

Share this post


Link to post
Share on other sites
I have own computers, I'll call them A and B. A is viewing webpages. B is using ethereal and can see the packets of the webpages.

Is there a way to translate http ethereal packets into webpages?

There's a way to do anything, of course. If you mean a way within ethereal, you can do this in ethereal, but it's a bit time consuming for big packets. Okay, first in the filter field, type http.response then click apply. This will limit you to http responses (which is all you care about).

Next, click on one of the responses, then clear the filter. Okay, now if it's a long piece of data you will see something like:

HTTP/1.1 200 OK (text/html) <-- the guy you clicked on

Continuation or non-HTTP traffic (this will be repeated maybe many times)

There may be some acks with no data in between these guys. Anyways, in the first guy, be mindful of how many bytes he says this transaction is.

Make sure the first guy is selected, and you should see 'Hypertext Transfer Protocol'. Skip that, and go down to 'Line-Based text data'. Select that, and right click and then choose export selected packet bytes. Choose a filename, and save it. Now go to the next packet in this stream (the next Continuation or non-HTTP traffic' and do the same thing, remembering to choose a different filename (ethereal overwrites instead of appending), continue until you have the whole thing, then you can combine these binary chunks into a single file and you're done.

This works much better on things that are expressed in a single packet, though.

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0