Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I look for HTTP to work with a Linux system server monitor tool every protocol. I know, and will not there be it in whom or a freeware?

When, for example, I dump 80/tcp with a packet monitor to be concrete

 # tethereal -i ppp0 port 80 -x
Capturing on ppp0

1244206390.030474 219.111.xx.xx -> 74.125.xx.xx HTTP GET /search?output=js&num=0&dt=1244206414703&client=pub-3031568651010206&q=Cagliari%20Flight&ad=n3&ie=utf8&oe=utf8&channel=0091594208&adtest=off HTTP/1.1

0000  00 04 02 00 00 00 00 00 00 00 00 00 00 00 08 00   ................
0010  45 00 01 e5 ee 82 40 00 40 06 d2 b5 db 6f 02 5b   E.....@.@....o.[
0020  4a 7d 4f 93 d4 29 00 50 3e df 4c 63 4b 6b 42 e0   J}O..).P>.LcKkB

Such output is provided, but there is too much unnecessary information such as an SYN packet or a header. What I want

  1. The IP address of the client and sending out character string(Get; the contents of the POST)
  2. Among the output character string of the server only as for the HTML (Content-Type:) I am what is chisel) of a thing of text/html.

I can set a filter and am the best if only information wanting can accumulate in the log.

share|improve this question

closed as off-topic by HopelessN00b Jan 25 '15 at 0:44

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

very similar question I asked few hours ago, Take a look at… – adopilot Jun 8 '09 at 19:00
Please, please, please don't use Ethereal/Tethereal. It's coming up up on four years since we changed the name to Wireshark. A lot of serious bugs have been fixed and major improvements have been made in that time. – Gerald Combs Mar 16 '10 at 19:14

tcpflow A TCP Flow Recorder - is really a great tool to debug http the filter syntax is the same as for tcpdump no need to learn another syntax :)

Example curl of

$ tcpflow -c port 80 and host GET / HTTP/1.1
User-Agent: curl/7.18.2 (i486-pc-linux-gnu) libcurl/7.18.2 OpenSSL/0.9.8g zlib/ libidn/1.10
Accept: */* HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Date: Mon, 08 Jun 2009 06:28:04 GMT
Expires: -1
Content-Type: text/html; charset=ISO-8859-1
Server: gws
Transfer-Encoding: chunked

share|improve this answer

You can do the recording w/ tcpdump and later get the stuff you only need via wireshark

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.