How to I add a filter to record only HTTP requests and not responses?
asked 10 Jul '12, 05:01
well, that's not easy. One option would be to use tshark
However that will only print the result to STDOUT. You cannot write a pcap file with -w, at least not with the current releases of tshark/wireshark.
However, with a little "trick", you can import the tshark output.
Select http_request.txt and you will get only the requests in Wireshark.
HOWEVER: I would rather capture everything and then (later) use a display filter (