Wireshark mailing list archives

Re: Yum install centos 5.2


From: Mike Brandonisio <mbrando () jikometrix net>
Date: Sun, 11 Oct 2009 16:28:40 -0500

Hi,

Since tshark appears to work I'm trying to record HELOs/EHLOs for a specific IP, the value of the HELOs/EHLOs.

I have this so far:

tshark -f "port 25" -R "ip.src==74.xx.xx.xx"

Any thoughts on how to see the value of the HELOs/EHLOs?

Sincerely,
Mike
--
Mike Brandonisio          *    Web Hosting / Development
Tech One Illustration     *    Internet Marketing
tel (630) 759-9283 x1001  *    e-Commerce
mbrando () jikometrix net    *    www.jikometrix.net

   JIKOmetrix - Reliable web hosting



Guy Harris wrote:
On Oct 11, 2009, at 1:21 PM, Mike Brandonisio wrote:

Is it possible I should be looking for something other than "wireshark" to execute?

No, that's the name of the executable.

What happens if you "locate tshark"? At least some RPM-based systems have, in an attempt to maximize confusion, packaged the non-GUI parts of Wireshark as "wireshark" and the GUI parts as "wireshark-gnome", or something like that; perhaps Centos 5.2 (or the version of Red Hat on which it's based) did that, so that you got the command-line TShark installed, but not the GUI Wireshark.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Attachment: mbrando.vcf
Description:

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: