This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark Blocks When Connecting to RPCAP Server

0

I'm using the latest stable version 2.2.1 (32-bit) on Windows with WinPcap from the installer. I'm starting rpcapd with:

rpcapd.exe -b 127.0.0.1 -p 3333 -n

and then I try to connect from Wireshark -> Remote Interfaces to the above - Host: 127.0.0.1, Port: 3333, Null auth. Wireshark blocks and I have to end the process. After this I still have a Dumpcap process in the task manager which is consuming 100% of a core. I sniffed the loopback interface using RawCap and the communication is as follows:

  1. Authentication request and reply
  2. Find all interfaces request and reply
  3. Authentication request and reply, again
  4. Open request and reply

IIRC the next packet should've been Start Capture, but I'm not seeing it. Any hints?

Thanks!

asked 14 Nov '16, 10:36

adrian-nicolau's gravatar image

adrian-nicolau
11114
accept rate: 0%


One Answer:

1

This is tracked by bug 13102

answered 14 Nov '16, 13:57

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%