Filter for only comm start and end

Hi,

I would like to have a filter that only writes the communication start and end and also the protocol used to a file. I need this, because I need to have a communication matrix from the AD Servers, to see what nodes are communicating with what protocol with the server.

Regards,

Ulrich