r1 - 30 May 2006 - 17:28:20 - AdamChristianYou are here: OSAF >  Journal Web  >  QualityAssuranceTeam > AdamChristianNotes > AdamChristianScoobyTestingNotes > AdamChristianNotesScoobyFiltering

Ethereal Filtering Details for viewing http for a specific host address

  • First Step is to install ethereal, on macosx I found :sudo port install ethereal" to be the simplest.
  • After its installed make sure you run it as root so that you can access the network interfaces. "sudo /opt/local/bin/ethereal"
  • Setup your interface and filter: on my macbook pro the wireless interface was en1.
  • Below you will see the capture filter which is: "host 192.168.103.148" This ip address is the machine I have running cosmo and scooby.
  • This directive just tells ethereal to only capture packets to and from that specific address.
  • For the aiport extreme I read that to reliably capture packets you must turn off promiscuous mode
  • I recommend not auto scrolling in live capture because it can be very irritating when you are trying to read a packets details and it keeps automatically switching to a new packet without asking.
etherealFilter.jpg
  • After you have started this capture you will notice that there is a lot of traffic there not specific to what you want and this is because you haven't filtered out just the http traffic which can be done by inserting http into the filter bar and clicking apply.
etherealfilter2.jpg
toggleopenShow attachmentstogglecloseHide attachments
Topic attachments
I Attachment Action Size Date Who Comment
jpgjpg etherealFilter.jpg manage 48.0 K 30 May 2006 - 17:07 AdamChristian Ethereal Interface Screen
jpgjpg etherealfilter2.jpg manage 255.0 K 30 May 2006 - 17:13 AdamChristian Ethereal Interface Screen with http filter
Edit | WYSIWYG | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r1 | More topic actions
 
Open Source Applications Foundation
Except where otherwise noted, this site and its content are licensed by OSAF under an Creative Commons License, Attribution Only 3.0.
See list of page contributors for attributions.