• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 478
  • Last Modified:

Unable to view domain name in Wireshark

I'm launching Wireshark then bringing up www.example.com in my browser then stoping wireshark capture. How can I find www.example.com in wireshark? I tried doing a string search but it does not find anything also using tcp port eq 80 does not bring up anything resembling www.example.com. Name resolution is enabled.
2 Solutions
Dave BaldwinFixer of ProblemsCommented:
Name resolution is done thru DNS on port 53.  All you will see on port 80 is the IP address.  http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
Monis MontherSystem ArchitectCommented:
What is it exactly that you want to see. If you would like to follow on the entire communication between your machine and the domain name go to

Analyze --> Follow TCP Stream

From HTTP you would see the GET request to the site as (GET / ) If you click on that packet and view its details you would see the domain name in your request.

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now