Using wireshark, can I save just the http packets to a pcap file. My capture stream consists of a large number of packets, out which only 10% are http packets. I want to save only HTTP packets to the pcap file by applying some sort of filter before saving the file. asked 18 Jun '15, 14:32  Backspace |
One Answer:
you could filter on "http" to get all packets that Wireshark considers to be HTTP, and then use "Export specified packets" to save only the currently displayed packets to a new file. answered 18 Jun '15, 14:39  Jasper ♦♦ |
