Ethereal-dev: RE: [Ethereal-dev] Filtering on http commands (help needed)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Esh, Andrew" <AEsh@xxxxxxxxxxx>
Date: Fri, 23 Aug 2002 13:39:39 -0500
Title: RE: [Ethereal-dev] Filtering on http commands (help needed)

I used to do this with tcpdump by converting the first few letters of the command to hex, and filtering on that hex value at the offset in the packet where the command begins.

-----Original Message-----
From: Joerg Mayer [mailto:jmayer@xxxxxxxxx]
Sent: Friday, August 23, 2002 1:18 PM
To: ethereal-dev@xxxxxxxxxxxx
Subject: [Ethereal-dev] Filtering on http commands (help needed)


Hello List,

I'm trying add a filter on the http command type (GET, POST etc). So
I've written the attached patch but I a) don't see this field in the
decode and b) filtering on http.command == GET or "GET" or 'GET' doesnt
work. As I'm not sure that this can work at all, I thought I'd ask
before spending more time on it.

 Ciao
    Jörg
--
Joerg Mayer                                          <jmayer@xxxxxxxxx>
I found out that "pro" means "instead of" (as in proconsul). Now I know
what proactive means.