Trying to use Wireshark Version 1.4.0rc2 (SVN Rev 33665 from /trunk-1.4) on Win XP to capture from my linux box running Wireshark Version 1.4.9 on Fedora 15 (2.6.38.6-26.rc1.fc15i386 with libcap version 1.1.1) On Capture Options, I specify "Remote" interface, Host "rpcapd://10.2.41.11" Username "pat" and Password. I get a error message: "Can't get list of interfaces: getaddrinfo() No such host is known." I have also tried: Host "rpcapd://10.2.41.11/eth0" I am running WinPcap 4.1.2 on the Windows box. asked 16 Nov '11, 13:53  gooberpat |
2 Answers:
You'll need to run rpcapd on the capture target. answered 17 Nov '11, 13:43  Jaap ♦ |
WinPcap appears to assume that it will always be handed a host name, not an dotted-quad string, for remote packet capture; it uses If the host at 10.2.41.11 has a host name, try using it instead of the dotted-quad. If it doesn't have a host name, and you can give it one (that can be resolved with a local host file, or that you can enter into the appropriate DNS or other name resolution server, e.g. NBNS/WINS), do so and then try using it instead of the dotted quad. And then file a bug against WinPcap for this; it's a bug that you can't use a dotted-quad or colonized-octet :-) address there. answered 17 Nov '11, 22:20  Guy Harris ♦♦ |
