Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] print only http post body

From: Franchoze Eric <franchoze@xxxxxxxxx>
Date: Wed, 12 Jan 2011 11:18:46 +0300
Hello,

Is it possible to print only http post body without any headers?
I need the output similar to:
tshark -r test.pcap -S -T text -s 1900 -R ip.addr==192.168.1.1 -R "http.request.method == \"POST\""  -V
But without all packet headers (IP, TCP  and etc). Only unzipped requests. Tried to setup fields with -Tfields -e, but not successful.
Please let me know if it possible.

Thanks,
Eric.