["Olivier Biot (Ethereal)" <ethereal@xxxxxxxxxxxxxxx>]

Hi,

Try the "contains" display filter operator. You can also use perl-compatible 
regular expressions in your display filter expressions; in this case the 
"matches" display filter operator will work.

Every packet containing the word "CONNECT" will be filtered with the 
following expression:
   frame contains "CONNECT"

I however suppose you want to look at all HTTP CONNECT transactions. In this 
situation, I'd use the following display filter:
   http.request.method matches "(?i)connect"
or even
   http.request.method matches "(?i)^connect$"
Here I assumed that the word "CONNECT" should be matched in a 
case-insensitive manner.

Best regards,

Olivier

----- Original Message ----- 
From: NOEL, ANDRE

Hi,

Is there any way to do a capture filter based on the HTTP data content ?  I 
want to capture
Every packet that contains  the word   CONNECT.