This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why can’t I see POST or GET HTTP statements?

0

Hi,

I have introduced a hub (from the Wireshark hub reference - thanks guys :) ) to my network and all traffic has to go through it.

Problem I have is that, although I am using web sites with online username/password forms, not SSL, I am not seeing any POST or GET statements. In fact, when I go to the email section of a website, one that does not have SSL activated, I am not seeing POST or GET there either.

The websites are using ASP pages - would this explain why I am not seeing these frames?

Thanks in advance for any advice

asked 02 Dec '11, 02:27

CuriousGeorge's gravatar image

CuriousGeorge
1111
accept rate: 0%

edited 26 Feb '12, 21:05

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142

I forgot to say that I am running this under Windows 7 - run as Admin :)

(02 Dec '11, 02:38) CuriousGeorge

The fact that a Web page is generated by ASP (or are any other form of non-static page) is transparent to the Web client, so it does not explain why you're not seeing POST or GET.

Are you seeing any traffic other than broadcast or multicast packets?

Presumably the hub is one listed as a "real hub" in the hub reference; is it a 10/100 hub or other multi-speed hub? If it's a 10/100 hub, are all the devices plugged into it running at the same speed (all 10 Mb/s or all 100 Mb/s or...)?

(02 Dec '11, 10:38) Guy Harris ♦♦

All devices are plugged into the listed hub (in the hub reference) They are all running at the same speed I can see SOME traffic from the site - but only incoming. No POST or GET from the PC.

(02 Dec '11, 11:20) CuriousGeorge

What traffic are you seeing? What are the devices plugged into the hub?

(02 Dec '11, 18:08) Guy Harris ♦♦

OK, so I think it may be something to do with my Windows 7 installation.

My network consists of a BT Homehub (swithced broadband router) which is plugged into a Netgear hub - as in one from the hub reference). My Windows 7 PC is plugged into the same hub. I then have a network socket run into another room. From that, the network is plugged into a switch (about to be replaced with a hub as above...) from which 2 laptops are plugged - one Linux, one Windows Vista.

The Linux (Ubuntu) has Wireshark on it and can see it's own FET and POST packets, but none other - I suspect that is because of the switch.

The other Windows 7 PC that is plugged into the hub can only see broadcast rtaffic - ARK, HTTP, UDP, TCP or HTTP incomplete Segments etc - basically, it APPEARS that I am seeing everything except the POST and GET statements.

Other than putting aLinux machine in that hub, anything else I can look at in WS itself?

(05 Dec '11, 03:56) CuriousGeorge

Is the network socket from the other room also plugged into the hub? If not, then you're not going to see its traffic on the Windows 7 PC - that PC will only see traffic that's sent into the hub; it won't magically see traffic that's sent through the BT router unless the router sends it to the hub. The Windows 7 PC will only be able to see broadcast and multicast traffic and unicast traffic to and from machines plugged into the hub. (Note, BTW, that TCP traffic, which includes most HTTP traffic, is NOT broadcast traffic!)

(06 Dec '11, 01:42) Guy Harris ♦♦

Hi,

I have the same problem, i am not able to view HTTP GET & POST messages on my Windows 7 laptop in wireshark.

Did you find any solution, please let me know if you have any information to get to see these messages on wireshark.

I am connected to my home WIFI and using Microsoft Interface from my system.

Thanks in advance :)

(16 Feb '12, 15:58) wired123
showing 5 of 7 show 2 more comments