This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Remote Interface

0

OK, here goes.

I have a Win 7 box on our corporate network running Wireshark 1.12.3. I am attempting to contact a device within another network using the Remote Interface option. The designer of the device has showed me how to set this up (and how well it works) if the computer is on the same net as the device. So... I am creating a tunnel to a machine attached to both networks. The tunnel connects perfectly, when I hit the forwarded port to the device I get a full list of the interfaces back as exppected. The trouble comes when I select the interface then hit "Start". I get

Error while capturing packets: Is the server properly installed on 127.0.0.1? connect() failed: No connection could be made because the target machine actively refused it. (code 10061)

Anybody have any thoughts? I am listening to port 2002 on the target device.

asked 06 Feb '15, 10:59

wadelouky's gravatar image

wadelouky
6112
accept rate: 0%

Sorry I forgot about this other error I have gotten a couple of times.

The capture session could not be initiated on interface 'rpcap://[127.0.0.1]:1234/eth0' (Unknown error (pcap bug; actual error cause not reported))

(06 Feb '15, 11:02) wadelouky

When you say "127.0.0.1", do you mean "127.0.0.1", or are you hiding the real IP address from public view by using the loopback IP address?

(29 Jan '16, 16:32) Guy Harris ♦♦

One Answer:

0

in the windows empire error code 10061 means TCP RESET, so the port you are trying to connect to is not open (anymore).

It sounds like you created a SSH tunnel (port forwarding), so the reason for the TCP RESET could be:

  • your local ssh client stopped listening to port 2002 (test with netstat -na)
  • the remote sshd stopped forwarding port 2002 to the target (check the sshd debug logs)
  • the remote rpcap daemon stopped listening to whatever port it was configured to listen to, maybe also 2002 (check with netstat -na).

Regards
Kurt

answered 09 Feb '15, 15:49

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%