Re: tshark filter

[David Milbourne <dmilbo () gmail com>]

Marco,

That works - thank you!

DM

On Wed, Oct 13, 2010 at 3:58 AM, Marco Simone Zuppone <msz () msz eu> wrote:

> Hello,
>
> you can try with: ftp.response.code == 230
>
> Regards.
> Marco S. Zuppone
>
> On Tue, Oct 12, 2010 at 10:56 PM, David Milbourne <dmilbo () gmail com>wrote:
>
> > I have a capture file that I'd like to go through and list all of the
> > successful ftp logins.  How can I do that with tshark?
> >
> > Thanks,
> > DM
> >
> >
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request () wireshark org
> > ?subject=unsubscribe
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe