79

How to make wireshark filter POST-requests only?

voices
  • 325
  • 2
  • 7
Ilya Smagin
  • 893
  • 1
  • 6
  • 6

4 Answers4

118

You can use the following filter:

http.request.method == "POST"
galoget
  • 235
  • 1
  • 9
Shane Madden
  • 114,520
  • 13
  • 181
  • 251
23

If you want to display both methods GET and POST you filter wireshark like this

http.request.method == GET or http.request.method == POST
mgorven
  • 30,615
  • 7
  • 79
  • 122
Said Bin
  • 231
  • 2
  • 2
1
sadashttp.request.method == “POST”
http.request.method == “POST”
techraf
  • 4,243
  • 8
  • 29
  • 44
rwer
  • 11
  • 1
0

For HTTP2 just use http2.headers.method == "POST"

lukyer
  • 101