X
X
xandarkx2016-02-14 17:32:36
Wireshark
xandarkx, 2016-02-14 17:32:36

How to filter only http packets?

Hello, can someone tell me how to use "tshark" to filter only http packets, so that it would be possible to catch "POST" packets or use tcpdump to filter?
I've tried:
tshark -i eth0 tcp port 80 or tcp port 443 -V -R "http.request || http.response"
gives an error:
WARNING: dumpcap will enable kernel BPF JIT compiler if available.
You might want to reset it
By doing "echo 0 > /proc/sys/net/core/bpf_jit_enable"
debian 8 system.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question