 | 1 | initial version |
Change 31184 added a field http.response_for.uri that contains as much of the request URI as is available.
This could be used in the first part of your filter as:
http.response_for.uri contains "iwaxx" || ...
Unfortunately the change hasn't (yet) been backported so you'll need to either use one of the automated builds produced since the change was merged, or build your own version from master.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.