Re: [Ethereal-users] display filter for pop3?

[Agryppa <agrypa1@xxxxxxxxxxxxxx>]

Dnia poniedziaÅek, 6 marca 2006 10:57, Guy Harris napisaÅ:

> That will find a *single TCP segment* that has POP traffic where the POP
> traffic has both "USER" and "RETR".
>
> Is that what you're trying to find?
Well, my intention is mimick what I achieved in smtp traffic:

"smtp contains FROM or smtp contains RCPT"

This way I can see from what address to what address the mail is sent and I 
can use Follow TCP Stream to monitor the entire conversation.
Can that be done for POP?

regards,
Agryppa