We are running the latest version of wireshark on workstations at our office, version 1.6.8. We have remote captures that allow users to use rpcap to capture from an interface on another server. With previous versions, this would automatically populate the interface with the proper server and interface to allow ease of use. Since upgrading, the interface no longer gets automatically populated. I have tried installing within the c:\program files directory instead of c:\program files (x86) as we have a mix of users. The rpcap shortcuts properly launch wireshark, but the interface does not populate with the specified parameters in the shortcut. This does work on version 1.2.6 What changes need to be made to run the latest version of wireshark, and still be able to utilize shortcuts for rpcap purposes? asked 08 Aug '12, 10:10  drumz |
One Answer:
Please try this:
Regards answered 10 Aug '12, 11:56  Kurt Knochner ♦ |
may I ask what you mean by "rpcap shortcuts"?
With older versions of wireshark, you could setup a windows shortcut with a path as follows - "C:\Program Files\Wireshark\wireshark.exe" -i rpcap://10.10.10.66/eth1 - and it would open up wireshark with eth1 on 10.10.10.66 ready to capture. This no longer happens, wireshark just opens with default options set.