Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Sniffing on Windows 10 machine from a remote Linux machine

Hi guys

I used to do this using the rpcapd but that is not supported anymore I tried to use the native sshdump support in Wireshark but that did not work I am also trying the below without much luck: plink.exe -ssh -t -pw "xxxx" [email protected] "sudo dumpcap -P -i ens160 -s0 -w -" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

I am not sure what I wrong If I do not do the piping I am being asked for a password (I think it is the sudo password) and I see garbage (so it works) If I add the piping then I think I am missing the prompt

What am I doing wrong ?

Sniffing on Windows 10 machine from a remote Linux machine

Hi guys

I used to do this using the rpcapd but that is not supported anymore I tried to use the native sshdump support in Wireshark but that did not work I am also trying the below without much luck: plink.exe -ssh -t -pw "xxxx" [email protected] "xxxx"[email protected] "sudo dumpcap -P -i ens160 -s0 -w -" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

I am not sure what I wrong If I do not do the piping I am being asked for a password (I think it is the sudo password) and I see garbage (so it works) If I add the piping then I think I am missing the prompt

What am I doing wrong ?

Sniffing on Windows 10 machine from a remote Linux machine

Hi guys

I used to do this using the rpcapd but that is not supported anymore I tried to use the native sshdump support in Wireshark but that did not work I am also trying the below without much luck: luck:

plink.exe -ssh -t -pw "xxxx"[email protected] "xxxx" [email protected] "sudo dumpcap -P -i ens160 -s0 -w -" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

-

I am not sure what I wrong If I do not do the piping I am being asked for a password (I think it is the sudo password) and I see garbage (so it works) If I add the piping then I think I am missing the prompt

What am I doing wrong ?