Arch1tect
Arch1tect

Reputation: 4281

How to see webpage content (as a whole) sent to user with wireshark

I use my pc as the wifi hotspot, and connect other devices to it. Then with wireshark, I can see the packets sending/receiving on a specific device, but how can I see the complete webpage that the device is viewing instead of separate packets?

Upvotes: 5

Views: 8984

Answers (3)

Smithers
Smithers

Reputation: 136

As @graphite said, you can save the line to a file. Your packet capture should also have caught the supporting files such as .css, images, etc; you may need to make placeholder files if you didn't get these.

You may also look at this answer here; the options included seem to more or less address what you're looking for: Complete reconstruction of TCP Session (HTML pages) from WireShark pcaps, any tools for this?

I'm kind of surprised I couldn't find some sort of "replay" browser plugin that takes PCAPs and simulates it using IE's DLL or the like...

Upvotes: 0

graphite
graphite

Reputation: 2960

Try to find packets of HTTP protocol with data. Try filter: http && (media || data-text-lines). And look what you get in this packets.enter image description here

Upvotes: 4

CodingRat
CodingRat

Reputation: 1944

You can not see the web page you can just see the protocol packets.

for detailed information please refer http://www.wireshark.org/faq.html section 7

Upvotes: 0

Related Questions