This is a static archive of our old Q&A Site. Please post any new questions and answers at

Why Does 1.6.8 No Longer Populate RPCAP shortcuts?


We are running the latest version of wireshark on workstations at our office, version 1.6.8. We have remote captures that allow users to use rpcap to capture from an interface on another server. With previous versions, this would automatically populate the interface with the proper server and interface to allow ease of use. Since upgrading, the interface no longer gets automatically populated.

I have tried installing within the c:\program files directory instead of c:\program files (x86) as we have a mix of users. The rpcap shortcuts properly launch wireshark, but the interface does not populate with the specified parameters in the shortcut.

This does work on version 1.2.6

What changes need to be made to run the latest version of wireshark, and still be able to utilize shortcuts for rpcap purposes?

asked 08 Aug '12, 10:10

drumz's gravatar image

accept rate: 0%

may I ask what you mean by "rpcap shortcuts"?

(08 Aug '12, 13:01) Kurt Knochner ♦

With older versions of wireshark, you could setup a windows shortcut with a path as follows - "C:\Program Files\Wireshark\wireshark.exe" -i rpcap:// - and it would open up wireshark with eth1 on ready to capture. This no longer happens, wireshark just opens with default options set.

(10 Aug '12, 11:00) drumz

One Answer:


Please try this:

wireshark -k -i rpcap://


answered 10 Aug '12, 11:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%