Now, with SSL, we recommend to use secure ICAP. When more than one filters are used, separate them with the use of " or". Remember to use the " ip host xx.xx.xx.xx", for the use of IP addresses, and " host ", for non-IP hosts. Wireshark has been around for a long time and the display filters that exist are good reference points to learn about. If, indeed, a POST request was generated, packets with the "POST" request will be seen in the capture.įor collecting the PCAP on the ProxySG appliance, utilize filters that reflect the source and destination of the traffic of interest. Irrespective of the chosen approach, to analyze "POST" HTTP requests, the filter, below, should be utilized, in Wireshark.įor HTTP2, use = "POST" in the Wireshark filter. To analyze captured packet data, use a tool that reads Packet Sniffer Pro 1.1 files, such as Wireshark or Packet Sniffer Pro 3.0.
0 kommentar(er)
