Wireshark · Wireshark-users: Re: [Wireshark-users] invalid request

[Martin Visser <martinvisser99@xxxxxxxxx>]

It is a little hard to tell without seeing the actual data. Maybe you can repost, with the data, However if Wireshark is not able to decode the data as HTTP, because it has not been formatted correctly according to the protocol then it will be an invalid request. It may be because you have not seen the beginning packets of the request

Regards, Martin

MartinVisser99@xxxxxxxxx

On 14 March 2012 05:57, mustafa alhussona <mustafarajimusa@xxxxxxxxx> wrote:

hi
i installed squid server and i have invalid request, so i decided to check the traffic using the wireshark, please can you tell me what does this line mean

[protocols in frame: eth:ip:tcp:http:data]

please what is the meaning of data ok i know the ip:tcp:http is for http request, but what data protocol mean
and there is a new field describes this data the field called Hypertext Transfer Protocol and contain data of length 56 byte

why this request is considered invalid request

thanks best regards

the packet discription is

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe