Hi guys,
Im trying to catch all bad passwords which are going to my RB via winbox. I already tried packet sniffer (Wireshark, ..) but communication looks encrypted or something.
I’m attaching pcap files of capturing (one with safe mode and one without). I was trying to login with name admin and password mypass. It was bad passwords, so TCP connection was reseted.
I was thinking about port forwarding of TCP 8291 to my PC and then log something but no goal.
Thanks for every tip 
winbox.zip (2.99 KB)