HI, i am facing problem with remote packet capturing after following all the steps mentioned in blog no matter how many time i redo the steps i stuck the same error "NO REMOTE INTERFACE FOUND " Regards @j asked 19 Oct '16, 22:23  AJ08 showing 5 of 8 show 3 more comments |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
It would help if you point to the blog as there are multiple ways to do remote capturing... And then it would also help is you tell us a little bit more about your setup...
ok !!
1.installed Wireshark on the PC 2.installed Winpcap on the client end and enabled rpcapd
and tried connecting to client i get the error saying no remote interface found .....
You know that you can capture rpcap traffic with a second instance of Wireshark? Have a look at the rpcap protocol exchange, and if possible share the capture file here.
@japp how can you capture the RPCAP traffic when the remote connection in getting establish ???
please can you explain it in details !!
Thanks....
When you are able to run two instances of Wireshark of the same platform, you have one for the remote connection while the other is active capturing your local network interface. That way you can see the rpcap protocol between the first instance and the remote. At least this is what I used to do eons ago on a Windows something server while experimenting with remote capture on an embedded platform.
@jaap i was able to capture the RPCAP packets between the client and the server please have a look
Can you share the capture in a publicly accessible spot, e.g. CloudShark?
Unfortunately i cant share it !!! is the Screen shot not providing you the full details ???