Try the "contains" display filter operator. You can also use perl-compatible
regular expressions in your display filter expressions; in this case the
"matches" display filter operator will work.
Every packet containing the word "CONNECT" will be filtered with the
following expression:
frame contains "CONNECT"
I however suppose you want to look at all HTTP CONNECT transactions. In this
situation, I'd use the following display filter:
http.request.method matches "(?i)connect"
or even
http.request.method matches "(?i)^connect$"
Here I assumed that the word "CONNECT" should be matched in a
case-insensitive manner.
Best regards,
Olivier
----- Original Message -----
From: NOEL, ANDRE
Hi,
Is there any way to do a capture filter based on the HTTP data content ? I
want to capture
Every packet that contains the word CONNECT.
