Wireshark mailing list archives

Wireshark filter "contains" question


From: George Vandelet <george_vandelet () yahoo com>
Date: Wed, 21 Jul 2010 12:29:47 -0700 (PDT)

I have rececently found the "contains" filter in wireshark which is VERY 
powerful.  For instance, if I only want to see http packets that contain the 
string "SOAP" I could used the filter "http contains SOAP".  However, if I wish 
to use the filter to show http packts that DONT contain the string SOAP, I can 
not do it!  I have tried using the following without success.
 http contains !(SOAP)
 http contains !SOAP
 http !contains SOAP 
 
 Does anyone know a way to  negate the "contains" filter?
 
 Thanks,
 
 George


      
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: