Show only HTTP traffic in Wireshark
How can I filter out traffic that is not HTTP in Wireshark, so that it shows me only HTTP traffic, but not, TCP, DNS, SSDP, etc.
In the filter field, type http
(lowercase!). Tested with WireShark Portable 1.10.7
Some basic filters
-
!http
shows all traffic which is NOT http -
ip.src != 196.168.1.1
shows traffic which is NOT from this IP source -
ip.dst == 196.168.1.1
shows traffic to this IP destination -
ip.addr == 196.168.1.1
shows all traffic which has the specific IP as source OR destination
To exclude SSDP/UDP: http && tcp
Credit: http://www.emtek.net.nz/blog/2013/03/17/wireshark-filter-http-only-exclude-ssdp-or-udp/
If you want to filter "ip address" and e.g. "http protocol" you have to input:
ip.src==192.168.109.217&&http
without spaces between.