Hi, I want to create a display filter for a particular field. Please help me to finish my task.
Here, I want to create filter for the “SOAPAction” field.
asked 11 Sep ‘11, 08:05
edited 11 Sep ‘11, 10:43
The HTTP field list doesn't include
Option 1: Custom HTTP header field
Add a custom header field to your HTTP preferences (requires Wireshark restart), which allows you to filter for the field.
Option 2: String matching display filter
This display filter scans entire HTTP packets for the string "SOAPAction:". This might be inefficient compared to a custom HTTP header field, but it works well.
answered 11 Sep '11, 11:19
edited 11 Sep '11, 17:15