Wireshark-users: Re: [Wireshark-users] URL capture filer??

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 4 Feb 2008 19:15:34 -0700

On Mon, Feb 04, 2008 at 03:45:56PM -0800, jacob c wrote:

> I just wanted/assumed Wireshark would read the http header for 
> www.cnn.com and then capture accordingly. That was my goal. Is there a 
> way to do that if I am using a proxy?

As Guy stated, you cannot do this in a capture filters.  However, you 
can do it in a display filter:

  http.host == "www.cnn.com"


Steve