This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm using the latest stable version 2.2.1 (32-bit) on Windows with WinPcap from the installer. I'm starting rpcapd with:

rpcapd.exe -b 127.0.0.1 -p 3333 -n

and then I try to connect from Wireshark -> Remote Interfaces to the above - Host: 127.0.0.1, Port: 3333, Null auth. Wireshark blocks and I have to end the process. After this I still have a Dumpcap process in the task manager which is consuming 100% of a core. I sniffed the loopback interface using RawCap and the communication is as follows:

  1. Authentication request and reply
  2. Find all interfaces request and reply
  3. Authentication request and reply, again
  4. Open request and reply

IIRC the next packet should've been Start Capture, but I'm not seeing it. Any hints?

Thanks!

asked 14 Nov '16, 10:36

adrian-nicolau's gravatar image

adrian-nicolau
11114
accept rate: 0%


This is tracked by bug 13102

permanent link

answered 14 Nov '16, 13:57

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×17
×15

question asked: 14 Nov '16, 10:36

question was seen: 677 times

last updated: 14 Nov '16, 13:57

p​o​w​e​r​e​d by O​S​Q​A