If you want to filter to just http stuff, just search for http.
If you want to look at TLS traffic, you have to get your https thing to log the nonces, which was harder than I had time for.
Filter by port:  tcp.port == 6697
Filter by ip: ip.addr == 123.456.789.10