Ethereal-users: RE: [Ethereal-users] capture HTTP without GET

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Wed, 28 Apr 2004 10:01:24 +0200
|From: lopppp
|
|
|Hi
|Please help me ,
|How capture packed HTTP without GET ??, or
|How capture packed HTTP with POST or
|How capture packed HTTP without file *.gif,*.jpg,*.exe

Do you mean capturing packets or do you mean displaying captured packets
that match a given filter in Ethereal?

Producing a *capture filter* for selectively capturing specific HTTP packets
that match the filter criteria you mention is not possible.

However you can apply *display filters* to filter an existing packet capture
and to highlight selected packets:

HTTP requests with POST:
	http.request.method == "POST"
  or: http.request.method matches "(?i)^post$"

HTTP content type is not GIF:
	!(http.content_type matches "(?i)image/gif")
  or: !image-gif

HTTP content type is not JPEG:
	!(http.content_type matches "(?i)image/(jfif|jpeg|jpg)")
  or: !image-jfif

Regards,

Olivier