This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Remote Packet Capture using Wireshark (Windows)

0

I am trying to set up remote packet capture amongst 2 machines within my network. I have installed Wireshark and WinPcap on the server and I have installed WinPcap on the target. I have both turned on Remote Packet Capture Protocol v.0 (experimental) and ensured rpcapd is running in services. I have turned off Windows firewall on both machines(The rules have been explicitly applied to both inbound and outbound on both of the PCs firewalls that port 2002 is allowed). Now when I go to wireshark and look up remote interfaces, I type in the IP address of the target and the port (2002 by default) but it says it cannot find any interfaces. Am I missing something here? Any advice would be much appreciated.

The PC's are both domain aware and on the same domain. The PC's are also on the same IP subnet but on different physical switches - if that makes a difference.

asked 02 Nov '16, 03:45

CrazyHorse019's gravatar image

CrazyHorse019
6113
accept rate: 0%

edited 02 Nov '16, 03:47