How to capture http traffic with wireshark

The following are two ways to capture http traffic with wireshark. The first method is to use a http filter. The screenshot of wireshark with the fiter applied is shown below.

The above filter captures and displays http traffic. This is a straight forward method.

The second way to capture http traffic is to use a TCP filter. HTTP traffic works on TCP port 80. The filter tcp.port–80 would also display http packets in the capture.

This is shown in the screenshot below.

It should be observed that this filter also displays the TCP handshake.

Learn and implement the different wireshark filters used by network administrators in our Ebook Wireshark tutorials for Network administrators – Click here to check details on Amazon

Check out our course Python Scapy Network Programming and Automation Course on Udemy

The course will teach you how to use Python with scapy to create custom network tools and scripts for various purposes like network testing, protocol testing, automation and more. The course explains with source code and examples of different types of network scripts and tools.