(http.request or ssl.handshake.type == 1) and !(udp.port eq 1900)
(http.request or ssl.handshake.type == 1 or tcp.flags eq 0x0002) and !(udp.port eq 1900)
(http.request or ssl.handshake.type == 1 or tcp.flags eq 0x0002 or dns) and !(udp.port eq 1900)
bootp
you need to search for DHCP
SSLKEYLOGFILE