Wireshark · Wireshark-users: Re: [Wireshark-users] find all tcp stream contain specific data

[gilles garcia <gilles-garcia@xxxxxxxxxx>]

Hi Sake,

 

thanks for your replies but doesn't works because communication proxies is not HTTP. It's just TCP.

The url is contain in data.

i can apply the filtre "data.data contain" but in this case i've just the packet wich contains the good string.

I want all TCP Stream where there is the string at a moment in data.

 

i don't know if i'm clear.

 

Scuse my english, i'm a french guy.

 

 

regards

Zoun69 

2009/2/11 Sake Blok <sake@xxxxxxxxxx>

How about:

 

http contains "<URL-string>"

 

Cheers,

 

 

Sake

 

----- Original Message -----

From: gilles garcia

To: wireshark-users@xxxxxxxxxxxxx

Sent: Wednesday, February 11, 2009 11:18 AM

Subject: [Wireshark-users] find all tcp stream contain specific data

Hi,

 

i captured a lot of communication between 2 proxy and i'm looking for , in the capture, all communication wich contains specific URL in "data".

 

Do you know what filter i can use ?

 

 

Thanks

Zoun69

---

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe