Expression

The Expression field serves as a powerful tool to filter packets containing a specific string within the actual payload data. Refer to Figure 1 and Figure 2 for an illustration.

Filtering with the Expression Field:

In Figure 1, the Expression field contains the term "http." Packet Search will exclusively filter packets that have the term "http" present within their payload data.

Open

Figure 1

Search Results Illustration:

Moving on to Figure 2, you'll find an example of a search results page displaying the word "http" encircled in an orange hue.

Open

Figure 2

How it Works:

1. Enter Expression: Input your desired string or term into the Expression field to filter packets based on payload content.

2. Search Results: Packet Search will display results containing the specified string, allowing you to focus on relevant packets for in-depth analysis.