This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Problem with Remote capturing

0

HI,

i am facing problem with remote packet capturing after following all the steps mentioned in blog no matter how many time i redo the steps i stuck the same error

"NO REMOTE INTERFACE FOUND "

Regards @j

asked 19 Oct '16, 22:23

AJ08's gravatar image

AJ08
6113
accept rate: 0%

It would help if you point to the blog as there are multiple ways to do remote capturing... And then it would also help is you tell us a little bit more about your setup...

(20 Oct '16, 04:15) SYN-bit ♦♦

ok !!

1.installed Wireshark on the PC 2.installed Winpcap on the client end and enabled rpcapd

and tried connecting to client i get the error saying no remote interface found .....

(20 Oct '16, 21:24) AJ08

You know that you can capture rpcap traffic with a second instance of Wireshark? Have a look at the rpcap protocol exchange, and if possible share the capture file here.

(21 Oct '16, 06:52) Jaap ♦

@japp how can you capture the RPCAP traffic when the remote connection in getting establish ???

please can you explain it in details !!

Thanks....

(24 Oct '16, 03:46) AJ08

When you are able to run two instances of Wireshark of the same platform, you have one for the remote connection while the other is active capturing your local network interface. That way you can see the rpcap protocol between the first instance and the remote. At least this is what I used to do eons ago on a Windows something server while experimenting with remote capture on an embedded platform.

(24 Oct '16, 04:05) Jaap ♦

@jaap i was able to capture the RPCAP packets between the client and the server please have a look alt text

(24 Oct '16, 05:12) AJ08

Can you share the capture in a publicly accessible spot, e.g. CloudShark?

(24 Oct '16, 06:09) Jaap ♦

Unfortunately i cant share it !!! is the Screen shot not providing you the full details ???

(24 Oct '16, 22:04) AJ08
showing 5 of 8 show 3 more comments