Which display filter shows only HTTP GET requests?

• A. http.request.method == "POST"
• B. http.request.method == "GET"
• C. http.request.url contains "/GET"
• D. http.request.method == 1

Answer: (B)

To show only HTTP GET requests, filter on the HTTP method and compare it to the string "GET": http.request.method == "GET". This works because Wireshark represents the method as a text value in the field http.request.method, with common values like "GET" and "POST". The other options don’t fit: filtering for "POST" shows only POSTs, filtering the URL for "/GET" looks at the path rather than the method and can miss GETs, and comparing the method to a number (1) isn’t valid since the method is a string, not a numeric value.