Hot answers tagged pcap
2
You can directly view/capture the remote packets to wireshark using tcpdump.
Remote packet capture using WireShark & tcpdump
How to Use tcpdump to capture in a pcap file (wireshark dump)
1
With tshark -r nfs.pcap -R 'nfs.fh.hash == 0x5c191ad8' you can get all requests or reply with fh. For more complicated cases I guess you need to write some code. There is a great tool for that http://git.linux-nfs.org/?p=mora/nfstest.git;a=summary
Only top voted, non community-wiki answers of a minimum length are eligible
