Wireshark · Wireshark-users: Re: [Wireshark-users] nfs attrs

[Mag Gam <magawake@xxxxxxxxx>]

sorry for being vague.

The OS i am using is Linux.

The information I am trying to capture is, "what user is trying to
access what file/directory" using NFS or Samba. Samba is pretty easy
but NFS is very hard to figure out whats going on.

I will bite the bullet and capture NFS traffic into a file.

Is it possible to do a display filter with 'tcpdump' on CLI? I don't
want to run out of memory when trying to read my dump file. It would
be nice if I can just get the NFS packet numbers and then I can query
more details about the particular packet.



On Thu, Feb 18, 2010 at 9:22 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
> On Feb 18, 2010, at 6:18 PM, Mag Gam wrote:
>
>> so, that means no way to just get attr information without capturing
>> the whole data?
>
> What do you mean by "attr information"?  What is it you're trying to find out here?
>
>> is there a filter I can setup while capturing?
>
> See one of my previous responses.
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>