http.cookie contains “datr” not working on Wireshark

Hi guys After sniffing for 10 minutes, I have stopped the process and when I enter ths ---> http.cookie contains “datr” in the Filter box for search it says ” http.cookie contains “datr” isn’t a valid display filter: ” ” was unexpected in this context. ”

I want to use Wireshark for Facebook

Why is it wrong?? please reply me quickly

Thx in advance

asked 28 Sep '13, 09:56

Unknown Guy
1●1●1●1
accept rate: 0%

edited 28 Sep '13, 11:01

grahamb ♦
19.8k●3●30●206

What version of Wireshark and what OS? The filter works (or at least doesn't give an error) for me with Wireshark 1.10.2 on Windows 8.1

(28 Sep '13, 10:58) grahamb ♦

One Answer:

active answers oldest answers newest answers popular answers

Possibly you have an odd type of double quotes in the filter box. Just try the plain text http.cookie contains datr

permanent link

answered 28 Sep '13, 11:03

grahamb ♦
19.8k●3●30●206
accept rate: 22%

not working it doesnot show the packets after creating the filter http.cookie contains datr

(14 May '14, 02:10) Lucky Masram

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

filter ×349
capture-filter ×184
display-filter ×165
syntax ×10
expressions ×5

question asked: 28 Sep '13, 09:56

question was seen: 16,292 times

last updated: 14 May '14, 02:36

http.cookie contains “datr” not working on Wireshark

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions