Sniffing, Wireshark

Capturing HTTP traffic using Wireshark

1. First of all download and install Wireshark from here.

2. Run Wireshark as administrator or root.

3. Select from the menu Capture > Interfaces.

4. Choose your interface and click options.

5. In the capture filter textbox type: tcp port http.

6. Select a file to save the traffic by clicking the browse button.

7. In the Name Resolution section check Enable network name resolution if you would like to see urls/hostname and not just ip addresses in the logs.

8. Click start.