Wireshark mailing list archives

print only http post body


From: Franchoze Eric <franchoze () yandex ru>
Date: Wed, 12 Jan 2011 11:18:46 +0300

Hello,

Is it possible to print only http post body without any headers?
I need the output similar to:
tshark -r test.pcap -S -T text -s 1900 -R ip.addr==192.168.1.1 -R "http.request.method == \"POST\""  -V
But without all packet headers (IP, TCP  and etc). Only unzipped requests. Tried to setup fields with -Tfields -e, but 
not successful.
Please let me know if it possible.

Thanks,
Eric.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: