This is our old Q&A Site. Please post any new questions and answers at

Hello, I captured packets associated with the loading of a plain text website in my browser. I am able to find the strings manually in the Uncompressed entity body of a packet. However when I run a string search or use the command http.response and data-text-lines contains "xxxxx" it doesn't find anything. Do you have an idea how to get Wireshark to search for strings inside the uncompressed entity bodies ? Also how do I use regex or at least wildcards in my strings ?

asked 10 Jul '16, 15:30

user370's gravatar image

accept rate: 0%

Maybe you could post a small capture file as an example with a specific search string in mind?

(18 Jul '16, 10:03) cmaynard ♦♦
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 10 Jul '16, 15:30

question was seen: 7,354 times

last updated: 18 Jul '16, 10:03

p​o​w​e​r​e​d by O​S​Q​A