how can I capture an outgoing or incoming email by the emailadress? thanks asked 26 Nov '10, 06:25  kurtw |
2 Answers:
You could just capture all the email based on the TCP port used and then apply a display filter such as: or use answered 27 Nov '10, 14:31  lchappell ♦ I had assumed the OP couldn't contend with the main SMTP feed's volume but I guess I could be wrong. I should stop thinking that everyone has to deal with massive scaling problems! :) (27 Nov '10, 18:25) hansangb |
Capturefilter I use: tcp port 110 or tcp port 25 or tcp port 143 Displayfilter I use: imf.from contains "[email protected]" or imf.to contains "[email protected]" or imf.sender contains "[email protected]" How can I export the filtered Emails to separatly files? thanks k.w. answered 01 Dec '10, 01:02 kurtw edited 01 Dec '10, 01:03 |
I don't think you can do it easily w/o resorting to a complicated capture filter that looks for specific characters at certain offsets. And that won't even work reliably unless the emails are being sent individually.