# Tshark - parameter posted as a JSON object

For a Tshark class...It's the only challenge I have left to complete, I've been trying to find a solution all dang day. I have looked through at least 100 pages Tshark info without success, everything I find on JSON regards the export to JSON process.

I have a supplied .pcap file, need to find the answer using Tshark...can someone kick me in the right direction?

"Supply value 'sid' parameter being posted as JSON object to 'xyz.com/5/batches/71/AA/'?"

THANKS!!

edit retag close merge delete

1. Can you assume that "posted as" means it will be a POST request? If so look at those.
2. Look for HTTP requests to xyz.com/5/batches/71/AA.
3. Does "Supply value 'sid' parameter" mean a JSON object with a key of "sid" ? Maybe a string or Regex search for frames containing that text.