Wireshark-dev: [Wireshark-dev] print only http post body
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Franchoze Eric <franchoze@xxxxxxxxx>
Date: Wed, 12 Jan 2011 11:18:46 +0300
Hello,

Is it possible to print only http post body without any headers?
I need the output similar to:
tshark -r test.pcap -S -T text -s 1900 -R ip.addr==192.168.1.1 -R "http.request.method == \"POST\""  -V
But without all packet headers (IP, TCP  and etc). Only unzipped requests. Tried to setup fields with -Tfields -e, but not successful.
Please let me know if it possible.

Thanks,
Eric.