Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

http.file_data contains "table_name"

This question (Display “Uncompressed entity body” like old tshark did with the -x option) has a link to a test site:

Make a packet capture when browsing to it then search for:

frame contains "Trace"

no packets are found.
Seaching for :

http.file_data contains "Trace"

finds the packet with the unencoded data.