Wireshark · Wireshark-users: [Wireshark-users] Hex Offset Needed

["Sheahan, John" <John.Sheahan@xxxxxxxxxxxxx>]

I am trying to troubleshoot an HTTP problem where the StatusCode=0 in the HTTP header.

I need to capture packets containing this parameter but since I am doing it on a Netscout probe, I have no way to figure out the offset of this in a packet.

 

Can anyone tell me what hex offset I would need to put in as a filter to capture these packets?

 

Thanks

 

John