Shulou(Shulou.com)05/31 Report--

This article introduces the example analysis of Wireshark grab package, the content is very detailed, interested friends can refer to it, I hope it can be helpful to you.

In my experiment, the default flask REST API is to open port 5000. However, when I use the request library or the browser's REST client to send data, the packet captured by wireshark is as follows:

You can see the relevant lines of the IPA protocol in the figure, and IPA is followed by unknown, so I wonder why JSON data transmitted based on HTTP shows unknown, and the protocol is not HTTP but IPA. After google, the following answers are found:

"IPA" is the ip.access "GSM over IP" protocol. That protocol apparently uses ports 3002, 3003, 3006, 4249, 4250, and 5000 over TCP. The ip.access dissector doesn't check whether the packets handed to it look like ip.access packets, so traffic that's not ip.access traffic but that's to or from one of those ports might be incorrectly dissected as ip.access traffic

In other words, when the port is 5000, even if the packet is not GSM over IP, only port 5000 will be considered to be a GOP packet, so the result of packet capture is like this.

Then only by modifying the port of REST API can you catch the HTTP package, as follows:

App.run (host='0.0.0.0',port=9100)

The parameter port has been added.

This is the modified package capture result:

Those lines of HTTP packages are the ones that interact with API.

This is the end of the sample analysis on Wireshark package capture. I hope the above content can be helpful to you and learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.