This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Why Does 1.6.8 No Longer Populate RPCAP shortcuts?

0

We are running the latest version of wireshark on workstations at our office, version 1.6.8. We have remote captures that allow users to use rpcap to capture from an interface on another server. With previous versions, this would automatically populate the interface with the proper server and interface to allow ease of use. Since upgrading, the interface no longer gets automatically populated.

I have tried installing within the c:\program files directory instead of c:\program files (x86) as we have a mix of users. The rpcap shortcuts properly launch wireshark, but the interface does not populate with the specified parameters in the shortcut.

This does work on version 1.2.6

What changes need to be made to run the latest version of wireshark, and still be able to utilize shortcuts for rpcap purposes?

asked 08 Aug '12, 10:10

drumz's gravatar image

drumz
1111
accept rate: 0%

may I ask what you mean by "rpcap shortcuts"?

(08 Aug '12, 13:01) Kurt Knochner ♦

With older versions of wireshark, you could setup a windows shortcut with a path as follows - "C:\Program Files\Wireshark\wireshark.exe" -i rpcap://10.10.10.66/eth1 - and it would open up wireshark with eth1 on 10.10.10.66 ready to capture. This no longer happens, wireshark just opens with default options set.

(10 Aug '12, 11:00) drumz

One Answer:

0

Please try this:

wireshark -k -i rpcap://10.10.10.66/eth1

Regards
Kurt

answered 10 Aug '12, 11:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%