 | 1 | initial version |
http.file_data contains "table_name"
This question (Display “Uncompressed entity body” like old tshark did with the -x option) has a link to a test site: http://httpbin.org/gzip
Make a packet capture when browsing to it then search for:
frame contains "Trace"
no packets are found.
Seaching for :
http.file_data contains "Trace"
finds the packet with the unencoded data.
