Wireshark : Capturing SMB traffic

[The_Librarian]

Hi All

I'm trying to capture SMB traffic with wireshark. (running on Linux Mint).

When I use the IPv4 filer "ip only" I get packets, so nothing is blocked at firewall level.

However, when trying to implement a Samba filter, I get nothing. The filters which I've tried is :

• port 445
• tcp port 445
• tcp port 137 or tcp port 138 or udp port 139 or udp port 445

Am I missing something somewhere?

 

[irBosOtter]

Old post but SAMBA is TCP 139