Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ssl/tls start/finish filter: tcp.flags & 0x02 || tcp.flags.fin == 1 || ( tcp.flags.ack == 1 && tcp.seq == 1 && tcp.len == 0)
- http req/resp: http.request|| http.response
- smtp commands: smtp.command_line
- POST's: http.request.method == "POST"
- Display...pretty much all everything you'd want to show to someone: (http.request.full_uri||http.response||dns.flags == 0x0100||ssl.handshake.type == 1) && !(ssdp)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement