How to disable HTTP protocol dissection in Wireshark?

httpparser

asked 2023-03-27 07:00:04 +0000

dora
1

Hi everyone,

I'm trying to disable the dissection of HTTP protocol in Wireshark for my specific use case. I don't need to analyze HTTP traffic and want to speed up the processing time by removing this feature. I'm running Wireshark as a command-line tool without a graphical user interface.

I've looked through the source code and documentation, but I couldn't find a straightforward way to disable the HTTP protocol dissection. Can anyone point me in the right direction? Is there a specific file or function I need to modify or remove?

Any help would be appreciated. Thank you!

edit retag flag offensive close merge delete

Comments

I'm running Wireshark as a command-line tool without a graphical user interface.
Do you mean tshark?

Chuckc ( 2023-03-27 13:15:47 +0000 )edit

yes，it's tshark

dora ( 2023-03-28 02:12:27 +0000 )edit

Could you use the --disable-protocol option?

Chuckc ( 2023-03-28 11:40:17 +0000 )edit

Not yet, I'm not aware of this parameter. I can't find an option for --disable-protocol in the CMakeLists.txt file，How do I get more information about this option？

dora ( 2023-03-29 02:59:02 +0000 )edit

See the tsharkman page: https://www.wireshark.org/docs/man-pa...

Chuckc ( 2023-03-29 10:40:27 +0000 )edit

add a comment

You mean create file in the gui graphical interface？i Compile on the command line，not in the GUI

dora ( 2023-03-29 07:08:23 +0000 )edit

Is there any other way to find this file?

dora ( 2023-03-29 07:09:16 +0000 )edit

I have found this folder, under /epan, thank you!

dora ( 2023-03-29 07:12:22 +0000 )edit

How to disable HTTP protocol dissection in Wireshark?

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

How to disable HTTP protocol dissection in Wireshark? edit

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

How to disable HTTP protocol dissection in Wireshark?