By default, Wireshark will display HTTP status packets as TCP packets with info TCP segment of a reassembled PDU. In this example, we can see that the selected packet is actually an HTTP/1.1 200 OK packet.
Follow these steps to customize Wireshark to display the HTTP status code instead of TCP segment of a reassembled PDU.
- In Wireshark, press Ctrl + Shift + P (or select Edit > Preferences).
- In the Preferences dialog box, expand Protocols and select TCP.
- Remove the check from Allow subdissector to reassemable TCP streams and select OK.