This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

When will Wireshark support remote packet capture in Macbook?

0

Guys,

As of my knowledge (I have a Macbook Pro) Wireshark does not support remote packet capture in MacOS. Is there any workaround or a plan to include this feature in newer versions?

Thanksl

asked 06 Sep '16, 13:54

Victor%20Tort's gravatar image

Victor Tort
6224
accept rate: 0%


One Answer:

0

The upcoming Wireshark 2.2 release will support that.

answered 07 Sep '16, 06:23

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

I just downloaded version 2.2 and it is still not supported.

(07 Sep '16, 17:18) Victor Tort

It does, via SSH remote capture, an extcap feature. It's at the bottom of your capture interfaces list.

(08 Sep '16, 05:08) Jaap ♦

If by "remote packet capture" you mean "the remote packet capture mechanism available on Windows", rather than "the ability to capture remotely by some mechanism, not necessarily the one available on Windows", then to support it in Wireshark, either 1) Wireshark needs to be built with a version of libpcap that supports it (the version in OS X doesn't currently support it) or 2) there needs to be an extcap module to support it (there is currently no such module).

At some point in the future the standard libpcap release should support it; hopefully, Apple will pick up that version once it's released.

(08 Sep '16, 10:22) Guy Harris ♦♦