If you want to filter to just http stuff, just search for http.

If you want to look at TLS traffic, you have to get your https thing to log the nonces, which was harder than I had time for.

Filter by port: tcp.port == 6697 Filter by ip: ip.addr == 123.456.789.10