I am trying to figure out a display filter to find any packets containing "If-Modified-Since" indicating they have the element they are looking for in cache. I did a right-click, Aplly as Filter, Selected, but this is ineffective since it applies a very long filter looking for the If-Modified-Since and the full time-stamp. An example looks like:
Other display filters I have tried:
data contains "If-Modified-Since"
data matches "If-Modified-Since"
data-text-lines matches "If-Modified-Since"
data-text-lines contains "If-Modified-Since"
And I have experimented with the "text" display filter (which I cannot find in the Display Filter Reference or in the expressions window).
I'm stumped. Anybody have an idea how to find If-Modified-Since in any packet that contains it?
Thanks in advance...
asked 07 Nov '13, 08:45
http matches "If-Modified-Since"
answered 07 Nov '13, 11:24