I usually use tcpdump to do a raw packet capture. Something like: # tcpdump -s 0 -w out.pcap host <nfs-server> (<nfs-server> is the hostname of the other machine, client or server) <ctrl>C <-- when you think you have enough Then you can read out.pcap into wireshark. rick ________________________________________ From: linux-nfs-owner@xxxxxxxxxxxxxxx <linux-nfs-owner@xxxxxxxxxxxxxxx> on behalf of Chandler <admin@xxxxxxxxxxxxxxxxxx> Sent: Thursday, October 24, 2019 7:40 PM Cc: linux-nfs@xxxxxxxxxxxxxxx Subject: Re: NFS hangs on one interface Thanks Bruce. Do you (or anyone) have an idea how to use wireshark "tshark" on the command line to capture this data? I tried to run it but it captures way too much traffic.. is there perhaps a certain port or ports I could tell it to monitor? 2049? Thanks