How to filter by protocol in wireshark 2.2.7

wireshark

I am trying to show only HTTP traffic in capture window in last version of Wireshark, but I cannot figure out what is the syntax in capture filter.

I have tried suggestions for old versions of Wireshark but with no success.

I have this current filter: 

ip host 192.168.0.201

Meaning that I want to capture packets from and to that ip address. I need to add HTTP protocol condition. I have tried "ip host 192.168.0.201 http", "ip host 192.168.0.201 and ip.proto == 'http', and a lot of other combinations but none worked.

EDIT:

This is the actual capture session, so that you can figure out what the problem is:

Capture session

Regards
Jaime

Best Answer

Based on your comments, if you only want to filter HTTP POST or GET messages you could use the following filter:

http.request.method == GET or http.request.method == POST and ip.host == 192.168.0.201

Tested with 2.2.6

wireshark screenshot

Related Question