Hello all.
This is my first post and thank you for your forum.
Here is my question.
I have a simple setup at home and I was capturing some data with wireshark.
Data between a workstation and the web server, requesting a page.
Simple enough.
Now when I open wireshark, I apply the TCP only filter for both capture live data and for display data but on the display window I am also getting HTTP along with TCP.
I just need to view TCP, so I can understand sequencing, headers and so forth.
HTTP is at the application layer, why am I seeing it here? I am confused.
Help?
Here is a screenshot.
http://img685.imageshack.us/img685/1433/capturecb.jpg