11

I need to be able to search all tcp streams that contain a particular string, not just a particular packet. Something like:

tcp.stream contains "string"

I need to do this in order to filter out all streams containing a certain string to get exactly what I'm looking for. My end goal filter would look something like this:

!(tcp.stream contains "string I do not want")

Zach Ogden
  • 111
  • 1
  • 1
  • 3

1 Answers1

0

You have two choices:

Option 1 - Display Filter:

Try the following display filter tcp and frame contains "xxxxxx"

Option 2 - Ctrl+F:

  1. Find (Ctrl +F)
  2. Find by String
  3. Search in packet Bytes
ALUFTW
  • 1,914
  • 13
  • 24