Wireshark-users: Re: [Wireshark-users] Display Filter for text string in TCP payload

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 08 Apr 2008 23:46:24 -0700
Feeny, Michael (GWM-CAI) wrote:

Both 'tcp contains "text"' and 'frame contains "text"' *do* work.

My mistake was that it didn't dawn on me that the filters are CASE
SENSITIVE (which makes sense now that I think about it).  When I had
successfully used Edit/Find, the Case Sensitive checkbox was off, so it
succeeded where the filter had not.

As far as I know, we don't have a case-insensitive version of the "contains" operator.

Perhaps your mail is an indication that we should.