CODEWITHSUNDEEP
network-programminggzipwiresharkpcapchunked-encoding
ChaCha
ChaCha

Reputation: 77

How to View source page using Wireshark?

Is there a possibility that a website's source page can be captured and viewed using Wireshark ? I do not need the header packets, what I am looking for is the full source page of any site that I open while running the Wireshark.

Upvotes: 3

Views: 1572

Answers (1)

RichieHindle
RichieHindle

Reputation: 281795

Yes - in the list of packets, right-click and say "Follow TCP Stream". For uncompressed content, that's it.

If the content is gzipped, you need to save that output to a file, use a decent text editor (that won't break binary content) to strip away the headers, then run gunzip to decompress it.

(If anyone knows of a way to make Wireshark do all that itself, I'm all ears!)

Edit: Just noticed the 'chunked-encoding' tag... that makes it harder. Editing away the chunk headers in the text editor should be possible, but tedious if there are a lot of them.

Upvotes: 1

Related Questions