Hi, I have problem with remote capturing. After 6-7 minutes from tshark remote start, pcap file stops growing. Nothing happens, no errors shows up. Dumpcap.exe is still running in Task Manager, and the lock to pcap file is still holding by dumpcap. I use command: C:\Program Files (x86)\Wireshark\tshark.exe -i rpcap://[10.154.5.33]:2002/\Device\NPF_{E5C7CD1D-35A9-4C3C-8E5F-C0BC37904D10} -w D:/tshark_dump.pcap BR, Paul asked 17 Oct '12, 01:23 Paul_PL |
One Answer:
This is probably not a problem with the remote capture in itself, but with tshark crashing because it ran out of memory. answered 17 Oct '12, 05:12 Jasper ♦♦ |