Ask Your Question

Revision history [back]

Capture filter similar to smb2.cmd==5

Is there a way to only capture packets with smb2 file create?

Ideally want to only capture file names over long period