Re: Yum install centos 5.2

[Mike Brandonisio <mbrando () jikometrix net>]

Hi,

I'm seeing what looks like encoded traffic.

\027\003\001\000

Any thoughts on how it is encoded?

Sincerely,
Mike
--
Mike Brandonisio          *    Web Hosting / Development
Tech One Illustration     *    Internet Marketing
tel (630) 759-9283 x1001  *    e-Commerce
mbrando () jikometrix net    *    www.jikometrix.net

   JIKOmetrix - Reliable web hosting



Guy Harris wrote:
> On Oct 11, 2009, at 2:28 PM, Mike Brandonisio wrote:
>
>   
> > Since tshark appears to work I'm trying to record HELOs/EHLOs for a  
> > specific IP, the value of the HELOs/EHLOs.
> >
> > I have this so far:
> >
> > tshark -f "port 25" -R "ip.src==74.xx.xx.xx"
> >     
>
> I'd try
>
>         tshark -f "port 25 and src host 74.xx.xx.xx"
>
> which will do all the filtering in libpcap/the kernel.
>
> However, if the HELO/EHLOs are coming on port 587 rather than port 25,  
> try
>
>         tshark -f "port 587 and src host 74.xx.xx.xx".
>
> I'm assuming here that the HELOs/EHLOs are coming *from* 74.xx.xx.xx;  
> if not, try
>
>         tshark -f "port 587 and dst host 74.xx.xx.xx"
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request () wireshark org?subject=unsubscribe
>
>

Attachment: mbrando.vcf
Description:

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe