Show only HTTP traffic in Wireshark

Question

How can I filter out traffic that is not HTTP in Wireshark, so that it shows me only HTTP traffic, but not, TCP, DNS, SSDP, etc.

enter image description here

score 35 · Accepted Answer · edited Jun 12 '20 at 13:48

35

In the filter field, type http (lowercase!). Tested with WireShark Portable 1.10.7

enter image description here

!http shows all traffic which is NOT http
ip.src != 196.168.1.1 shows traffic which is NOT from this IP source
ip.dst == 196.168.1.1 shows traffic to this IP destination
ip.addr == 196.168.1.1 shows all traffic which has the specific IP as source OR destination

edited Jun 12 '20 at 13:48

Community

answered May 01 '14 at 22:58

nixda

Johann · Answer 2 · 2015-04-07T20:17:15.583

5

To exclude SSDP/UDP: http && tcp

edited Apr 07 '15 at 20:17

answered Mar 19 '15 at 23:06

Johann

score 2 · Answer 3 · answered Sep 15 '17 at 10:58

2

If you want to filter "ip address" and e.g. "http protocol" you have to input:

ip.src==192.168.109.217&&http

without spaces between.

answered Sep 15 '17 at 10:58

Bettelbursche

3 Answers3