Rlogin provides a remote-echoed, locally flow-controlled virtual terminal. It is widely used between Unix hosts.
Rlogin was originally a BSD application / protocol.
- ["TCP"]: Rlogin uses ["TCP"] as its transport protocol. The well known TCP port for Rlogin traffic is 513.
The Rlogin dissector is functional.
A complete list of Rlogin display filter fields can be found in the [http://www.wireshark.org/docs/dfref/r/rlogin.html display filter reference]
Show only the Rlogin based traffic:
You cannot directly filter Rlogin protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.
Capture only the Rlogin traffic over the default port (513):
tcp port 513
[http://www.ietf.org/rfc/rfc1282.txt RFC 1282] BSD Rlogin