0

No capture from a pipe after upgrading to 3.4

tcpdump

asked 2020-10-31 09:46:26 +0000

EugK
1 ●1 ●1

updated 2020-10-31 23:42:51 +0000

Guy Harris
19890 ●3 ●659 ●207

Can't run remote capture after upgrading from 3.2.8 to 3.4.0

Script to run capture:

plink.exe -batch -ssh -pw xxx user@host "sudo /usr/sbin/tcpdump -Unqi plc0 -s 0 -w -"   | Wireshark -k -i -

Wireshark 3.4.0 shows nothing (packets to host transmitted successfully)

Downgrading back to 3.2.8 resolves the problem.

edit retag flag offensive close merge delete

Comments

Have you ever looked at using the sshdump extcap interface?

Chuckc ( 2020-11-01 00:00:07 +0000 )edit

1 Answer

Sort by » oldest newest most voted

0

answered 2020-10-31 10:58:27 +0000

Pascal Quantin
5846 ●63 ●65

updated 2020-11-01 09:25:40 +0000

Capture from stdin in Windows is currently broken and will be fixed in 3.4.1. The fix is under review here.

edit flag offensive delete link

Comments

[Wireshark-users] Wireshark 3.4.1 is now available

Chuckc ( 2020-12-10 15:35:28 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Question Tools

1 follower

Stats

Asked: 2020-10-31 09:46:26 +0000

Seen: 773 times

Last updated: Nov 01 '20

Related questions