Unable to write to standard output: The pipe is being closed.

asked 2018-03-03 17:58:34 +0000

updated 2018-03-04 14:10:46 +0000

grahamb gravatar image

Hello! Wireshark worked for me for a year or two but from a while I can't capture anything from my laptop. I'm using latest version of wireshark, I already tried to install latest version of my network card driver but with no result. I can capture from other PC but not from my laptop. When I try to capture traffic from remote EVE-NG/Unetlab node I receive following error (in cmd) and nothing capture

Connecting to "root"@MYSERVERIP..."
tcpdump: listening on vunl0_2_0, link-type EN10MB (Ethernet), capture size 262144 bytes
Unable to write to standard output: The pipe is being closed.

The script who call wireshark is here:



SET PASSWORD="password"

SET S=%1

SET S=%S:capture://=%

FOR /f "tokens=1,2 delims=/ " %%a IN ("%S%") DO SET HOST=%%a&SET INT=%%b

IF "%INT%" == "pnet0" SET FILTER=" not port 22"

ECHO "Connecting to %USERNAME%@%HOST%..."

"C:\Program Files\UNetLab\plink.exe" -ssh -pw %PASSWORD% %USERNAME%@%HOST% "tcpdump -U -i %INT% -s 0 -w -%FILTER%" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

Any ideea?

edit retag flag offensive close merge delete


I ran into something very similar myself with builds in the 2.2 and 2.4 branches:


But didn't get too far. I recently tried a 2.5.2 build and it worked on one computer but on the second system it failed because it's timing out while Wireshark starts up 'Finding local interfaces'.

As a test you might try reverting to 2.0.16 (last in the 2.0 branch) since this works for me all of the time. That is, assuming what your tracing can be effectively done with that version.

dbAtAffirmed gravatar imagedbAtAffirmed ( 2018-04-02 21:38:21 +0000 )edit