1.

show http header field value only

C:\Program Files\Wireshark>tshark -r C:\Users\4528874\Documents\http_only.pcapng -T

fields -e "http.host" > C:\Users\4528874\Documents\http_host_only.txt

2. show http header field value and name

C:\Program Files\Wireshark>tshark -r C:\Users\4528874\Documents\http_only.pcapng -T
fields -e "http.host" -e "http.location" -E header=y >
C:\Users\4528874\Documents\http_headers.txt

3.
tshark -r dump.pcap -i http==1 -O http -T fields -e http.request.method -e
http.request.uri -e http.request.line > dump.txt

https://networkengineering.stackexchange.com/questions/43766/wireshark-extract-all-
http-headers/43776?noredirect=1#comment73618_43776