Wireshark-users: Re: [Wireshark-users] question about exporting/filtering files
From: M Holt <m.iostreams@xxxxxxxxx>
Date: Wed, 2 Dec 2009 09:20:50 -0800
You could open in wireshark, and then for the display filter, use the following:

http.request.method == GET

That will show you only your packets with GET requests.
Next, File -> Save As -> Packet Range Displayed -> give it a file name and then hit Save.

On Tue, Dec 1, 2009 at 10:17 AM, zeev mintz <zeevmintz@xxxxxxxxx> wrote:
Hi,
 
I have captured lots of traffic, and I would like to filter out certain packets from my captures.
For example, I want to filter only http GET messages.
 
Since I have over a thousand log files (each over 100mb), I need a fast (or some kind of automatic) way to export only the http GET messages from all the log files, into several small files (no bigger than 100mb each).
 
As far as I can see, I can't filter messages during capture by the http method (GET), and there is no export feature through the wireshark terminal commands. What can i do?
 
Thanks alot,
shalev
 


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe