Start the start php

With Wireshark2.6.3 Version as an example , As shown in the figure below , The red box 803 Once. HTTP Of GET Request package , In the green box 809、810 Both records are response packets , Which one is 803 The response package of ？ Next, we introduce three ways to identify

Identification by transmission control protocol information

Click on 803 After this record , Open the transport layer information in the following details window , see Next sequence number The value of the field is 282

Open separately 809、810 Details of these two records , View their transport layer information , find Acknowledgment number Field , be equal to 282 Our record is 803 Response information for

By this time we have found 803 The corresponding response , Can continue to open HTTP Layer data view the details of the response information

The method of identifying information through transmission control protocol is slightly troublesome , You need to open all records and check them one by one ,Wireshark A more convenient way has been made ：

an 803 No. recorded HTTP layer , As shown in the figure below , The contents in the red box are clickable , Double clicking will immediately open the response record 809 The content of

There is also a corresponding request package link when viewing the response data , Double click the link to open the corresponding request packet , Here's the picture , With 809 No. record as an example , stay HTTP You can double-click the contents in the red box in the following figure , Open it directly 803 The content of

These are three ways to find request response associations , Hope to be able to give you Wireshark For reference