How do I filter for HTTP 500 responses and their requests in Wireshark?
I'm able to use
http.response.code == 500 to find all the responses which got the return code 500 but I want to be able to see the requests of those responses, too.
Update: I want to do this automatically so that I can set up a tshark.exe instance to record one day and only save the interesting HTTP traffic (there is a WEBDAV running on the same server with a lot of traffic that does not interest me).
Second Update: Since I mainly wanted to record messages that were sent to a WebService and not the WEBDAV, I used
http.content_type contains "text/xml" to filter for xml based messages. This is not 100% what I was looking for but generates small enough logs for further debugging.