I'm trying to build a filter that will show me HTTP packets that have the Media Type as application/pdf. So far, "media contains application" is not bringing them up; however it will bring up other packets in the capture such as javascript, octect-stream, and x-msdownload. Simply using "media" will gain me these packets, but I'd like to be more precise. Thanks! asked 24 Dec '13, 05:44 Rob_D edited 24 Dec '13, 05:44 |
2 Answers:
Please try one of these:
or
or
Regards answered 25 Dec '13, 00:18 Kurt Knochner ♦ |
Rob one method I have seen work is to do a follow stream at the start of the packet. Its important to know the beginning and end packets. Do a save as and select your filetype i.e. "pdf". So first filter the correct ip & time. Do a follow stream then save as. This might help. answered 24 Dec '13, 20:55 rayyai beach |
The first 2 worked exactly as I needed! Thanks Kurt!