If you want to filter to just http stuff, just search for http
.
If you want to look at TLS traffic, you have to get your https thing to log the nonces, which was harder than I had time for.
Filter by port: tcp.port == 6697
Filter by ip: ip.addr == 123.456.789.10