Bootstrap FreeKB - Wireshark - Show HTTP status instead of TCP segment of a reassembled PDU
Wireshark - Show HTTP status instead of TCP segment of a reassembled PDU

Updated:   |  Wireshark articles

By default, Wireshark will display HTTP status packets as TCP packets with info TCP segment of a reassembled PDU. In this example, we can see that the selected packet is actually an HTTP/1.1 200 OK packet.

Follow these steps to customize Wireshark to display the HTTP status code instead of TCP segment of a reassembled PDU.

  1. In Wireshark, press Ctrl + Shift + P (or select Edit > Preferences).
  2. In the Preferences dialog box, expand Protocols and select TCP.
  3. Remove the check from Allow subdissector to reassemable TCP streams and select OK.




Did you find this article helpful?

If so, consider buying me a coffee over at Buy Me A Coffee



Comments


Add a Comment


Please enter b1c4db in the box below so that we can be sure you are a human.