igreenfield

#!/bin/bash

##########################################
# Generate Filter tool:
# https://www.wireshark.org/tools/string-cf.html
# 
# GET Filter:
# tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x47455420
# POST Filter: 
# tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354 && tcp[((tcp[12:1] & 0xf0) >> 2) + 4:1] = 0x20