Wireshark-users: [Wireshark-users] Hex Offset Needed

From: "Sheahan, John" <John.Sheahan@xxxxxxxxxxxxx>
Date: Mon, 1 Mar 2010 17:37:30 -0500

I am trying to troubleshoot an HTTP problem where the StatusCode=0 in the HTTP header.

I need to capture packets containing this parameter but since I am doing it on a Netscout probe, I have no way to figure out the offset of this in a packet.


Can anyone tell me what hex offset I would need to put in as a filter to capture these packets?