Use pattern sets and data sets
<text>.<operator>("<name>")
-
<text>is the expression that identifies a string in a packet. Example: HTTP.REQ.HEADER("Host"). -
<operator>is one of the operators described in the Pattern Set Types table pdf.