This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Guys,

As of my knowledge (I have a Macbook Pro) Wireshark does not support remote packet capture in MacOS. Is there any workaround or a plan to include this feature in newer versions?

Thanksl

asked 06 Sep '16, 13:54

Victor%20Tort's gravatar image

Victor Tort
6224
accept rate: 0%


The upcoming Wireshark 2.2 release will support that.

permanent link

answered 07 Sep '16, 06:23

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

I just downloaded version 2.2 and it is still not supported.

(07 Sep '16, 17:18) Victor Tort

It does, via SSH remote capture, an extcap feature. It's at the bottom of your capture interfaces list.

(08 Sep '16, 05:08) Jaap ♦

If by "remote packet capture" you mean "the remote packet capture mechanism available on Windows", rather than "the ability to capture remotely by some mechanism, not necessarily the one available on Windows", then to support it in Wireshark, either 1) Wireshark needs to be built with a version of libpcap that supports it (the version in OS X doesn't currently support it) or 2) there needs to be an extcap module to support it (there is currently no such module).

At some point in the future the standard libpcap release should support it; hopefully, Apple will pick up that version once it's released.

(08 Sep '16, 10:22) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×53
×26

question asked: 06 Sep '16, 13:54

question was seen: 2,277 times

last updated: 08 Sep '16, 10:22

p​o​w​e​r​e​d by O​S​Q​A