This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am trying to set up remote packet capture amongst 2 machines within my network. I have installed Wireshark and WinPcap on the server and I have installed WinPcap on the target. I have both turned on Remote Packet Capture Protocol v.0 (experimental) and ensured rpcapd is running in services. I have turned off Windows firewall on both machines(The rules have been explicitly applied to both inbound and outbound on both of the PCs firewalls that port 2002 is allowed). Now when I go to wireshark and look up remote interfaces, I type in the IP address of the target and the port (2002 by default) but it says it cannot find any interfaces. Am I missing something here? Any advice would be much appreciated.

The PC's are both domain aware and on the same domain. The PC's are also on the same IP subnet but on different physical switches - if that makes a difference.

asked 02 Nov '16, 03:45

CrazyHorse019's gravatar image

CrazyHorse019
6113
accept rate: 0%

edited 02 Nov '16, 03:47

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×146
×26
×24

question asked: 02 Nov '16, 03:45

question was seen: 1,506 times

last updated: 02 Nov '16, 03:47

p​o​w​e​r​e​d by O​S​Q​A