ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] print only http post body

From: Franchoze Eric <franchoze@xxxxxxxxx>
Date: Wed, 12 Jan 2011 11:18:46 +0300
Hello,

Is it possible to print only http post body without any headers?
I need the output similar to:
tshark -r test.pcap -S -T text -s 1900 -R ip.addr==192.168.1.1 -R "http.request.method == \"POST\""  -V
But without all packet headers (IP, TCP  and etc). Only unzipped requests. Tried to setup fields with -Tfields -e, but not successful.
Please let me know if it possible.

Thanks,
Eric.