 | 1 | initial version |
In general this is difficult as filters only operate on a single packet at a time, it's either in or out based on the contents of the packet.
For protocols that include a link to the response in the request, as AOE does with the aoe.response_in field, then you should be able to filter on this. I'm unable to test this (I have no AOE captures) but try !aoe.response && ! aoe.response_in. This first part should select AOE requests, the second part limits to those without the response_in field.
