Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

asked 2019-12-12 11:52:54 +0000

SP gravatar image

Can I capture network traffic using a string

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP

click to hide/show revision 2
None

updated 2019-12-12 21:07:33 +0000

Guy Harris gravatar image

Can I capture network traffic using a string

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP

click to hide/show revision 3
None

updated 2019-12-12 21:07:58 +0000

Guy Harris gravatar image

Can I What's a capture network traffic using a stringfilter to capture only SMB1 traffic?

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP

click to hide/show revision 4
None

updated 2019-12-12 21:09:43 +0000

Guy Harris gravatar image

What's Is there a capture filter to capture that captures only SMB1 traffic?

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP

click to hide/show revision 5
retagged

updated 2019-12-13 04:36:32 +0000

Guy Harris gravatar image

Is there a capture filter that captures only SMB1 traffic?

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP

click to hide/show revision 6
retagged

updated 2019-12-13 04:36:53 +0000

Guy Harris gravatar image

Is there a capture filter that captures only SMB1 traffic?

Hi,

I want to run network capture on domain controllers to identify the clients connected to them using SMB1.0, I also want to minimize the file size of the capture.

so how to capture network traffic with a string like "Tree Connect Request" and "Tree Connect Response"

Regards, SP