Wireshark mailing list archives
Re: Yum install centos 5.2
From: Mike Brandonisio <mbrando () jikometrix net>
Date: Sun, 11 Oct 2009 17:01:42 -0500
Hi, I'm running this: tshark -f "port 25 and src host 74.xx.xx.xx" This is the output I'm getting 0.090293 74.xx.xx.xx -> 64.xx.xx.xx SMTP C: EHLO host22.example.com That is exactly what I'm looking for. How can I can narrow the filter only those that contain 'SMTP'? Sincerely, Mike -- Mike Brandonisio * Web Hosting / Development Tech One Illustration * Internet Marketing tel (630) 759-9283 x1001 * e-Commerce mbrando () jikometrix net * www.jikometrix.net JIKOmetrix - Reliable web hosting Guy Harris wrote:
On Oct 11, 2009, at 2:28 PM, Mike Brandonisio wrote:Since tshark appears to work I'm trying to record HELOs/EHLOs for a specific IP, the value of the HELOs/EHLOs.I have this so far: tshark -f "port 25" -R "ip.src==74.xx.xx.xx"I'd try tshark -f "port 25 and src host 74.xx.xx.xx" which will do all the filtering in libpcap/the kernel.However, if the HELO/EHLOs are coming on port 587 rather than port 25, trytshark -f "port 587 and src host 74.xx.xx.xx".I'm assuming here that the HELOs/EHLOs are coming *from* 74.xx.xx.xx; if not, trytshark -f "port 587 and dst host 74.xx.xx.xx" ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Attachment:
mbrando.vcf
Description:
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Re: Yum install centos 5.2, (continued)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Kevin Cullimore (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Guy Harris (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Guy Harris (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Guy Harris (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Guy Harris (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 12)
- Re: Yum install centos 5.2 Guy Harris (Oct 12)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 12)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 14)
- Re: Yum install centos 5.2 Jeffrey Walton (Oct 14)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 14)
- Re: Yum install centos 5.2 Mike Brandonisio (Oct 11)