Remote Capture VIA Cell Modem
Hello, I have more of a basic yes/no type question before I start doing deep research.
Have a extremely random and rare event that happens. I wish to setup a SharkTap connected to a local basic PC device that is capturing Ethernet packets to a local device, I would like to store about 2 days of packets for the sake of having time to remote connect to the local PC through the cell modem to retrieve the captured packets in the local PC to examine on my laptop with Wireshark.
The local PC could just be Windows 11 running Wireshark and I remote desktop connect and manage wire shark. But I now see a Python option that seems sole purpose is to capture data packets, then some method of transferring the file to my laptop to be analyzed.
Is there this Python capture option? Is it difficult to setup? Or would it just as well to setup Windows 11 on that local PC and setup Wireshark that way and be done?
Looking forward to your response. Thanks Keith
First question would be if you want all captures to be transferred or just when the problem occurs. That will steer you into automatic file uploading or some form of interactive file retrieval.
You mention a python option, but as this does not come from Wireshark itself, I have no idea what python option you have found and therefore can't comment on whether or not it could fit your needs.
I think another consideration would be to determine what you feel confident to use. Personally, I would setup a linux system with an SSH tunnel to my office over which I could SSH back in to copy files when the problem occurs. But that might not be a solution you would feel confident about. So choosing technology that is familiar to you would be the best option I think.
PyShark has been mentioned here in the past.
I would not consider PyShark a viable option for this scenario...
(@syn-bit skipping the ASCII art for thumbs up) :-)
Is there a way for wireshark to start upon computer startup?