Wireshark-users: Re: [Wireshark-users] filter for ONLY initial get request

From: "Thierry Emmanuel" <Emmanuel.Thierry@xxxxxxxxxxxxxxx>
Date: Fri, 13 Aug 2010 09:44:39 +0200

> 
> Okay, let me see if I have this right...  Using a script I would look 
> for the GET request to contain the domain name with the 
> http.content_type == "text/html" in the server response.  If both of 
> those conditions are true, grab the domain.
> 
> Is that the gist of it?
>

You've got it ! ;)
Now the most tedious is to make this script.

Best regards