0

I have a filter, where I am filtering connections based on a HTTP proxy hostname.

But I need to filter the whole TCP connections where at least one packet contain this tag (from SYN to FIN, not just the packets which contain this HTTP tag), is there some way to do this?

My current filter: http.proxy_connect_host == "www.example.com"

New contributor
NetworkEngineer1234567 is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
1
  • 1
    If you right click on the HTTP packet and click Follow and then click TCP Stream is that what you are looking for? Sep 20 at 12:31

0

Your Answer

NetworkEngineer1234567 is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.