Wireshark mailing list archives

Re: question about exporting/filtering files


From: M Holt <m.iostreams () gmail com>
Date: Wed, 2 Dec 2009 09:20:50 -0800

You could open in wireshark, and then for the display filter, use the
following:

http.request.method == GET

That will show you only your packets with GET requests.
Next, File -> Save As -> Packet Range Displayed -> give it a file name and
then hit Save.

On Tue, Dec 1, 2009 at 10:17 AM, zeev mintz <zeevmintz () yahoo com> wrote:

Hi,

I have captured lots of traffic, and I would like to filter out certain
packets from my captures.
For example, I want to filter only http GET messages.

Since I have over a thousand log files (each over 100mb), I need a fast (or
some kind of automatic) way to export only the http GET messages from all
the log files, into several small files (no bigger than 100mb each).

As far as I can see, I can't filter messages during capture by the http
method (GET), and there is no export feature through the wireshark terminal
commands. What can i do?

Thanks alot,
shalev



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: