[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 14, 2003, at 10:18 AM, Morel Olivier FRF wrote:

> I have a rather large ethereal file containing a complete HTTP dialog
> between a PC and a server.
> I would like to get out of it all packets containing a specific error 
> (HTTP
> 404).
>
> Is there a simple way (display filter ?) to extract only packets 
> related to
> HTTP 404 error ?

If you want the 404 reply, but *don't* care whether you see the request 
that generated it, the filter is

	http.response_code == 404

There is no filter that'll give you the requests as well - when the 
request is dissected, the HTTP dissector doesn't know what the response 
is.