Wireshark does not capture HTTP on 8080

Question

I am running Wireshark on my linux machine and i have simple python web server running on localhost:8080

I am capturing only local port 8080. When i open browser on localhost:8080 wireshark captures huge amount of tcp communication (as page loads with all resources) but there`s no HTTP only TCP...

Why i cannot capture HTTP on custom port ?

score 2 · Answer 1 · answered May 08 '13 at 00:12

2

Why i cannot capture HTTP on custom port

You can capture on a custom port just fine.

I would bet that you are capturing on the wrong interface.

If your requests are going to 127.0.0.1 tcp/8080 and you are capturing on the eth0 interface, then you simply won't see any traffic because eth0 is not the loopback adapter.

Capture on the loopback interface, or capture on the pseudo-interface that combines all interfaces named any.

answered May 08 '13 at 00:12

Zoredache

130,897
41
276
420

i am capturing on lo interface (Ubuntu). – martin85 May 08 '13 at 01:30

score 2 · Accepted Answer · answered May 08 '13 at 00:15

2

Right-click on the TCP stream, then select Decode as.... Go to the Transport tab, if you aren't already on it. From the list, select HTTP. Click OK and enjoy.

Wireshark: Decode As

answered May 08 '13 at 00:15

Michael Hampton

244,070
43
506
972

Wireshark, by default, considers traffic to or from ports 80 and 8080 (as well as 3128, 3132, 5985, 8088, 11371, 1900, 2869, and 2710) as HTTP traffic, so it *shouldn't* be necessary to use "Decode as..." to recognize port 8080 traffic as HTTP. – Apr 07 '16 at 18:20

Wireshark does not capture HTTP on 8080

2 Answers2

Linked