How to I add a filter to record only HTTP requests and not responses? asked 10 Jul '12, 05:01 sorin |
One Answer:
well, that's not easy. One option would be to use tshark
However that will only print the result to STDOUT. You cannot write a pcap file with -w, at least not with the current releases of tshark/wireshark. However, with a little "trick", you can import the tshark output.
In Wireshark
Select http_request.txt and you will get only the requests in Wireshark. HOWEVER: I would rather capture everything and then (later) use a display filter ( Regards answered 11 Jul '12, 07:16 Kurt Knochner ♦ edited 11 Jul '12, 07:39 |