This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Remote capture and user authentication

0

Hi, i'm using Wireshark to monitor traffic of a windows machine (using Winpcap). everything works fine but any user account which exists on the target machine is allowed to do a remote capture. how could i specify allowed user or groups ?

asked 19 Jul '11, 06:57

sos00's gravatar image

sos00
1111
accept rate: 0%


One Answer:

0

All you can do is limit the hosts which may connect. Run rpcapd.exe -help to see the options.

answered 19 Jul '11, 07:29

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

edited 19 Jul '11, 07:29

Thanks Jaap, I'm using third-party vpn for connecting to server so using the host file may causes some more problems.

(19 Jul '11, 09:08) sos00