Wireshark · Wireshark-users: Re: [Wireshark-users] How to filter all the http related stuff from a pcap file

[sandeep nitta <sandeep.nitta@xxxxxxxxx>]

how about applying the display filter : "http.request.method == GET or
http.request.method == POST" and then saving the data into a new file?

by the way, file|export|objects|http didnt work for me. i am attaching
the file for analysis, if anyone can point why it didnt work.
i am using v 1.2.4 of wireshark on win xp

Thanks,
sandeep Nitta

On Fri, Apr 30, 2010 at 10:48 PM, Sheahan, John
<John.Sheahan@xxxxxxxxxxxxx> wrote:
> I usually just sort the traffic by protocol in the display and I get an nice
> concise view of all the HTTP traffic
>
>
>
> From: wireshark-users-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Ashish Jain
> Sent: Friday, April 30, 2010 6:50 AM
> To: wireshark-users@xxxxxxxxxxxxx
> Subject: [Wireshark-users] How to filter all the http related stuff from a
> pcap file
>
>
>
> Hi All,
>
> This is my very first post to wireshark community. I am newbie and have
> recently installed wireshark to analyse a pcap file.
> The pcap file has around 84000 packets so it is not possible to manually see
> the data in each packet. I want to get all the
> data related to http get and post in one file. I tried "follow tcp stream"
> but I see very limited stuff in it and not everything.
> Can someone guide me on this.
>
> Thanks
> Ashish
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>

Attachment: http-session-with-fin.pcap
Description: Binary data