Quote:
Originally Posted by david fw monitor is a command line utility. are you wanting to open a capture file to view in smartracker? this is not possible. you can use tcpdump & redirect the output to a file, then open with a tool such as ethereal to view/analyse 'offline' |
I was looking more for packet(s) related to an event that was dropped and thus shows up in my logs.
For example, lets say I deny outbound http access and log the drops. Then a user went to
www.google.com. I would like to be able to see the actual packet of the http fetch to
www.google.com from this user.
Is that possible?
Thanks for the reply btw.