深度字符串匹配
contains :Does the protocol, field or slice contain a value
示例
tcp contains “http” 显示payload中包含”http”字符串的tcp封包。
http.request.uri contains "online" 显示请求的uri包含”online”的http封包
!(tcp contains "xxx.com") && !(tcp contains "bbbb.com") &&http
tcp contains "cccc.com" && http tcp包里面包含了cccc.com 并且再http