This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to filter only m-post method

0

I'm looking the way how to filter only m-post method via wireshark

M-POST is a new HTTP method defined using the HTTP Extension Framework located at http://www.w3.org/Protocols/HTTP/ietf-ext-wg. This method is used when you are including mandatory information in the HTTP header, just as you used the mustUnderstand attribute in the SOAP header element.

asked 14 Apr '15, 10:15

izdryk's gravatar image

izdryk
11●2●2●3
accept rate: 0%

2 Answers:

0

The HTTP dissector allows you to add custom headers through the preferences. I'm not sure if that makes them filterable, but it's worth a try.

answered 15 Apr '15, 02:04

Jaap's gravatar image

Jaap ♦
11.7k●16●101
accept rate: 14%

0

You can try this:

tcp contains "M-POST"

Hint: Please keep in mind that the contains operator is case sensitive, so the above filter will only find "M-POST" not "m-POST" or "M-post", etc.

If you want/nned case insensitive filtering, please use the following one:

tcp matches "(?i)M-POST"

Regards
Kurt

answered 15 Apr '15, 02:17

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%