Wireshark · Wireshark-users: Re: [Wireshark-users] Display Filter for text string in TCP payload

[Guy Harris <guy@xxxxxxxxxxxx>]

Feeny, Michael (GWM-CAI) wrote:

> Both 'tcp contains "text"' and 'frame contains "text"' *do* work.
>
> My mistake was that it didn't dawn on me that the filters are CASE
> SENSITIVE (which makes sense now that I think about it).  When I had
> successfully used Edit/Find, the Case Sensitive checkbox was off, so it
> succeeded where the filter had not.

As far as I know, we don't have a case-insensitive version of the 
"contains" operator.

Perhaps your mail is an indication that we should.