Wireshark mailing list archives
Re: Is there any way to specify remote interfaces with tshark?
From: "Maynard, Chris" <Christopher.Maynard () IGT com>
Date: Mon, 10 Sep 2018 13:55:11 +0000
The dumpcap man page[1] mentions the syntax for remote capturing, but the tshark man page[2] does not. It probably should. The same goes for "dumpcap -h" output: Usage: dumpcap [options] ... Capture interface: -i <interface> name or idx of interface (def: first non-loopback), or for remote capturing, use one of these formats: rpcap://<host>/<interface> TCP@<host>:<port> vs. "tshark -h": Usage: tshark [options] ... Capture interface: -i <interface> name or idx of interface (def: first non-loopback) - Chris [1]: https://www.wireshark.org/docs/man-pages/dumpcap.html [2]: https://www.wireshark.org/docs/man-pages/tshark.html From: Wireshark-dev [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Dario Lombardo Sent: Monday, September 10, 2018 4:29 AM To: Developer support list for Wireshark <wireshark-dev () wireshark org> Subject: Re: [Wireshark-dev] Is there any way to specify remote interfaces with tshark? Hi Richard Are you talking about rpcap? If I'm not mistaken you can use rpcap://IP as interface name. On Sat, Sep 8, 2018 at 6:01 PM Richard Sharpe <realrichardsharpe () gmail com<mailto:realrichardsharpe () gmail com>> wrote: Hi, I have built wireshark to use remote interfaces (with the correct build of libpcap) and cannot find any way in tshark to specify remote interfaces. Have I just missed them or is there truly no way to specify remote interfaces in tshark? -- Regards, Richard Sharpe (何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者) CONFIDENTIALITY NOTICE: This message is the property of International Game Technology PLC and/or its subsidiaries and may contain proprietary, confidential or trade secret information. This message is intended solely for the use of the addressee. If you are not the intended recipient and have received this message in error, please delete this message from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is strictly prohibited.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Is there any way to specify remote interfaces with tshark? Richard Sharpe (Sep 08)
- Re: Is there any way to specify remote interfaces with tshark? Dario Lombardo (Sep 10)
- Re: Is there any way to specify remote interfaces with tshark? Maynard, Chris (Sep 10)
- Re: Is there any way to specify remote interfaces with tshark? Richard Sharpe (Sep 10)
- Re: Is there any way to specify remote interfaces with tshark? Maynard, Chris (Sep 10)
- Re: Is there any way to specify remote interfaces with tshark? Dario Lombardo (Sep 10)