It looks like you're running that command on the system you want to monitor? Or the system you're going to use to record packets?
You need to start rpcapd on the system(or systems) that you want to be able to record packets on from a remote system. It begins listening for another system to connect and start retrieving packets from it.
Then, in the system you want to run Ethereal on, capture from the remote system by using an adapter name of "rpcap://<ip address>/<adapter name>"
Ian
On Nov 5, 2004, at 2:55 PM, Silverstein, Jeffrey wrote:
<x-tad-smaller>Hi, per your previous suggestions, I tried to use rpcap to capture the packets to and from the remote nic, but I must be doing something wrong. I was using the syntax</x-tad-smaller>
<x-tad-smaller> </x-tad-smaller><x-tad-smaller>rpcap://10.11.12.13/adaptername.</x-tad-smaller>
<x-tad-smaller>What I typed specifically was </x-tad-smaller>
<x-tad-smaller>rpcapd://172.16.52.212/3Com EtherLink PCI: \Device\NPF_{C5533B45-4272-4036-8610-369AD6E69036}. </x-tad-smaller>
<x-tad-smaller>When I did this I got </x-tad-smaller>
<x-tad-smaller>Press CTRL + C to stop the server...</x-tad-smaller>
<x-tad-smaller>I also tried </x-tad-smaller>
<x-tad-smaller>rpcapd://172.16.52.212/3Com EtherLink PCI</x-tad-smaller><x-tad-smaller>.</x-tad-smaller>
<x-tad-smaller>I got the same result. Nothing appears to be happening. I tried writing the output to a file and it didn't write the file. </x-tad-smaller>
<x-tad-smaller> Since these adapter names appeared in the Ethereal Capture Options Interface drop down list I assumed that one of these was the name of the adapter; is this correct or is the adapter name obtained in some other way?</x-tad-smaller>
<x-tad-smaller> What else might I be doing wrong?</x-tad-smaller>
<x-tad-smaller>Thanks for your help.</x-tad-smaller>
<x-tad-smaller>Jeff</x-tad-smaller>
_____________________________________________
From: Silverstein, Jeffrey
Sent: Wednesday, November 03, 2004 12:08 PM
To: 'ethereal-users@xxxxxxxxxxxx'
Subject: can't get ethereal to see another nic in capture drop down list
<x-tad-smaller>Hi, I'm testing out Ethereal on Windows XP by connecting 2 machines with a crossover cable. I have installed Ethereal on both machines. When I look at the list of interfaces in the "Interface:" field in the dialog box popped up by "Capture->Start", all I can see is the local interface. When I try to capture the other interface by entering the IP or the MAC address, Ethereal gives me an error. This happens no matter which machine I do this from. What do I need to do to get both interfaces to appear in the dialog box?</x-tad-smaller>
<x-tad-smaller>Thanks,</x-tad-smaller>
<x-tad-smaller>Jeff</x-tad-smaller>
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users