Web view columns
The following table describes the columns common to all of the Web views of a capture window.
Column
|
Description
|
---|---|
Name
|
Name of the server, client, page, or individual HTTP request.
|
Timing
|
Graphical timeline of this individual HTTP request.
|
Request ID
|
Unique ID assigned to this individual HTTP request.
|
Page ID
|
Unique ID assigned to an HTML page. All the images, stylesheets, and other embedded files that make up a single HTML page will have this same Page ID. When Page ID == Request ID, that's the HTML page's request.
|
Flow ID
|
Flow ID assigned to this client/server TCP connection. Same as the Flow ID that appears throughout Expert views.
|
Client Addr
|
Who sent this HTTP request?
|
Client Port
|
TCP port from which this HTTP request came.
|
Server Addr
|
Who sent this HTTP response?
|
Server Port
|
TCP port from which this HTTP response came. Usually port 80.
|
URI
|
What file or page on the server the HTTP request wants. Can be outrageously long for some cgi, ad server, and database-driven requests.
|
Response Code
|
Numeric HTTP response code, such as 200 for success, or 404 for page not found.
|
Response Text
|
Textual explanation of HTTP response code, such as “OK” or “Page not found”.
|
Content-Type
|
Value of the Content-Type HTTP response header. text/html for HTML pages, image/jpeg for jpegs.
|
Referer
|
Value of the Referer HTTP request header. URL of page that linked to this individual HTTP request. For embedded images, stylesheets, and so on, this is usually the containing HTML page. For HTML pages, this is the page that linked to this page.
|
Host
|
Value of the Host HTTP request header. Can differ from actual Server IP address when accessing a web server farm. (Not shown in screenshot above.)
|
Packets
|
Total number of packets.
|
Client Pkts
|
Request packets from client
|
Server Pkts
|
Response packets from server
|
Bytes
|
Total number of bytes
|
Client Bytes
|
Request bytes from client
|
Server Bytes
|
Response bytes from server
|
Request Data Bytes
|
Payload bytes from client (typically 0 unless there is some POST data). “Client Bytes” minus all the HTTP request header bytes.
|
Response Data Bytes
|
Payload bytes from server, often the size of the actual file transferred (unless transfer-encoding adds to or compresses the payload). “Server Bytes” minus HTTP response header bytes.
|
Start
|
Time of first packet, either the SYN if this is the first request on a flow, or the first packet of the HTTP GET or other HTTP request.
|
Finish
|
Time of last packet, either the last FIN if this is the last request on a flow, or the last packet of the HTTP response.
|
Duration
|
The difference between Finish and Start times.
|