I am trying to figure out a display filter to find any packets containing "If-Modified-Since" indicating they have the element they are looking for in cache. I did a right-click, Aplly as Filter, Selected, but this is ineffective since it applies a very long filter looking for the If-Modified-Since and the full time-stamp. An example looks like:
Other display filters I have tried: data contains "If-Modified-Since" data matches "If-Modified-Since" data-text-lines matches "If-Modified-Since" data-text-lines contains "If-Modified-Since" And I have experimented with the "text" display filter (which I cannot find in the Display Filter Reference or in the expressions window). I'm stumped. Anybody have an idea how to find If-Modified-Since in any packet that contains it? Thanks in advance... asked 07 Nov '13, 08:45 kpalmgren |
One Answer:
http matches "If-Modified-Since" answered 07 Nov '13, 11:24 Jim Aragon |
Excellent! Thank you.