jacob c wrote: > I just wanted/assumed Wireshark would read the http header for > www.cnn.com <http://www.cnn.com> and then capture accordingly.
No. "host XXX" in libpcap/WinPcap (the library that Wireshark/TShark - and a *lot* of other software, including tcpdump/WinDump - uses to capture traffic) - means "traffic to or from the IPv4 address or the IPv6 address corresponding to XXX". That requires that libpcap/WinPcap (and thus the application using it) resolve any host name given in "host XXX" expressions. > Is there a way to do that if I am using a proxy? No. _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
