Wireshark, or better tcpdump or dumpcap for the long running capture could do this, but have you considered looking at the logs for whatever software is logging the clients on?
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments
Can you explain your question some more? Are you capturing at the client side or the server side?
server side but I am trying to see if i can run a history on any clients that have ever logged on.
Wireshark, or better tcpdump or dumpcap for the long running capture could do this, but have you considered looking at the logs for whatever software is logging the clients on?