Wireshark-users: Re: [Wireshark-users] filter for ONLY initial get request

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "j.snelders" <j.snelders@xxxxxxxxxx>
Date: Sun, 8 Aug 2010 09:04:17 +0200
On Sun, 08 Aug 2010 01:20:35 -0500 David Alanis wrote:
>Quoting Jeffs <jeffs@xxxxxxxxxxxxx>:
>
>> On 8/8/2010 12:02 AM, David Alanis wrote:
>>> Quoting Jeffs<jeffs@xxxxxxxxxxxxx>:
>>>

>
>Not sure what your ultimate goal here is but give this filter a try as 

>it only displays the initial GET / HTTP/1.1 request and nothing else...
>
>http.request.uri == "/"
>
...also other http.request.methods, e.g. POST, will be displayed,

so use
(http.request.method == "GET") && (http.request.uri == "/")

Best regards
Joke