[Ethereal-users] Capture Filter on SMB protocol

["Pradeep Vincent" <vincen57@xxxxxxx>]

I am using SMB over TCP on Win 2000 and sniffing the traffic using Ethereal on Linux. I was trying to filter out SMB requests/responses from the data (most of which is non SMB - referred to as NetBIOS Session Service by Ethereal). Apparently the pcap library doesn't seem to provide any filtering at SMB level (or at the level of any higher level protocol). I was wondering if there is any work around for this.

 

Thanks,

 

Pradeep Vincent