Hi everyOne! Im launching wireshark using the command line :: [wireshak_Path] > wireshark -i int_Number. but the capture is not started until i double click on the interface! not a good idea if im using it throught a Script! is there any solution to start the capture without the intervention of the user!
You should use dumpcap instead of Wireshark, because that's what Wireshark uses to capture packets anyway. You can find some pointers how to use dumpcap in this blog post:
For Wireshark only, you'll need to supply the -k flag:
From the man page:
-k
Start the capture session immediately. If the -i flag was specified, the capture uses the specified interface. Otherwise, Wireshark searches the list of interfaces, choosing the first non-loopback interface if there are any non-loopback interfaces, and choosing the first loopback interface if there are no non-loopback interfaces; if there are no interfaces, Wireshark reports an error and doesn't start the capture.
The answer from @Jasper is good advice in general though.
Asked: 2021-03-15 09:07:30 +0000
Seen: 713 times
Last updated: Mar 15 '21
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Wireshark version?