Re: Filtering on file extensions

[Martin Visser <martinvisser99 () gmail com>]

You haven't said what protocol you are using for your file server, but if
it is SMB (aka CIFS or WIndows file sharing), than a display filter like
"smb.file contains .mp3" will show up appropriate requests and responses.

Regards, Martin

MartinVisser99 () gmail com


On 25 January 2012 06:22, Brian J Pohlman <BPohlman () cbi com> wrote:

> Is it possible to filter on specific file extensions within Wireshark
> using wild cards?
>
> I'm capturing traffic on a file server looking for extensions such as
> .mp3, .mp4, etc. I can filter on specific file names but haven't found a
> way using wildcards (if supported)
>
> I would like to filter on file extensions such as *.mp3
>
> Thanks for any insight provided.
>
> Brian
>
> *Th**is e-mail and any attached files may contain CB&I (or its
> affiliates) confidential and privileged information. This information is
> protected by law and/or agreements between CB&I (or its affiliates) and
> either you, your employer or any contract provider with which you or your
> employer are associated. If you are not an intended recipient, please
> contact the sender by reply e-mail and delete all copies of this e-mail;
> further, you are notified that disclosing, copying, distributing or taking
> any action in reliance on the contents of this information is strictly
> prohibited.*
>
> * *
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe