Editing Packet sniffer (section)

== Case: try to find mp4 file ==
keyword filter at URL Snooper v.2.30.01
* full request URI: ex: {{kbd | key=<nowiki>http://www.example.com/folder/file.mp4</nowiki>}} ok
* partial URI path: ex: {{kbd | key=/folder/file.mp4}}, {{kbd | key=file.mp4}}, {{kbd | key=mp4}} ok
* wildcat: ex: {{kbd | key=*.mp4}} not work {{exclaim}}

Filter at Wireshark 1.6.5
* full request URI: ex: {{kbd | key=ip.dst == 127.0.0.1 and http.request.uri matches "upload2/letsgo.mp4" }} (where the domain www.example.com was mapping to IP: 127.0.0.1) ok
* partial URI path: 
** ex: {{kbd | key=http.request.uri matches "/folder/file.mp4"}}, {{kbd | key=http.request.uri matches "file.mp4"}}, {{kbd | key=http.request.uri matches "mp4"}} ok
** ex: {{kbd | key=tcp and ip.src== 127.0.0.1 }}
* wildcat: ex: {{kbd | key=http.request.uri matches "*.mp4" }} not work {{exclaim}}