On 8/8/2010 3:04 AM, j.snelders wrote:
On Sun, 08 Aug 2010 01:20:35 -0500 David Alanis wrote:
Quoting Jeffs<jeffs@xxxxxxxxxxxxx>:
On 8/8/2010 12:02 AM, David Alanis wrote:
Quoting Jeffs<jeffs@xxxxxxxxxxxxx>:
Not sure what your ultimate goal here is but give this filter a try as
it only displays the initial GET / HTTP/1.1 request and nothing else...
http.request.uri == "/"
...also other http.request.methods, e.g. POST, will be displayed,
so use
(http.request.method == "GET")&& (http.request.uri == "/")
Best regards
Joke
___________________________________________________________________________
Sent via: Wireshark-users mailing list<wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
Thank you! that is very much what I am looking for. Does wireshark
take regex expressions because after using your filter (which gets me
about 80% of what I need) I see there are many URLs which look like
this, which I would also like:
www.domainname.com/landingpagelink
and the http.request.uri == "/"
will not capture those embedded links because of the trailing
"/landingpagelink"
I'm wondering if some regex expression could help here.
Thank you again for the expert advice!
