Wireshark Display Filter

http

# Common patterns:
# tcp.flags.syn == 1 && tcp.flags.ack == 0   (TCP SYN)
# http.request.method == "POST"
# dns.qry.name contains "example.com"
# tls.handshake.type == 1   (TLS ClientHello)
# !arp && !dns   (exclude noise)