This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello everyone...hope someone can help me.

I am trying to capture packets from another machine on my network. When I click the "remote" option and type in the ip address and port number I would like to capture, an error message comes up that says "Can't get list of interfaces: The other host terminated the connection". Also, when I try to use port 80 instead of the port I am getting the other message with, it returns this error message: "Can't get list of interfaces: Is the server properly installed on #.#.#.#? connect() failed: No connection could be made because the target machine actively refused it. (code 10061) "

I have tried to find any info on this online but have been unsuccessful. Any help is appreciated..

Thanks!

asked 17 Jan '11, 07:18

atomv's gravatar image

atomv
16113
accept rate: 0%

edited 17 Jan '11, 07:35


The remote capture feature is used to capture frames on a remote host running rpcapd. I guess you're having the wrong idea about its purpose. If you want to capture frames of another system you have to do that via monitor session, network tap or other techniques. See the Wireshark Wiki for common ways to capture.

permanent link

answered 17 Jan '11, 07:50

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Start "remote packets capture service" from services.msc in remote computer

permanent link

answered 12 Mar '11, 08:45

benson4u2c's gravatar image

benson4u2c
161
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×205
×193
×69

question asked: 17 Jan '11, 07:18

question was seen: 17,949 times

last updated: 12 Mar '11, 08:45

p​o​w​e​r​e​d by O​S​Q​A