It looks like you're running that command on the system you want to
monitor? Or the system you're going to use to record packets?
You need to start rpcapd on the system(or systems) that you want to be
able to record packets on from a remote system. It begins listening
for another system to connect and start retrieving packets from it.
Then, in the system you want to run Ethereal on, capture from the
remote system by using an adapter name of "rpcap://<ip
address>/<adapter name>"
Ian
On Nov 9, 2004, at 12:14 PM, Jeffrey Silverstein wrote:
Hi I wrote before about this. I'm trying to monitor a
remote interface from my workstation. I was using a
crossover cable to test this first. The remote
interface didn't appear in the drop down list, so it
was suggested that I use the rpcap utility but I can't
get it to work right. Thanks for any help you can
give. Here's what's happening:
I tried to use rpcap to capture the packets to and
from the remote nic, but I must be doing something
wrong. I was using the syntax
rpcap://10.11.12.13/adaptername.
What I typed specifically was
rpcapd://172.16.52.212/3Com EtherLink PCI:
\Device\NPF_{C5533B45-4272-4036-8610-369AD6E69036}.
When I did this I got
Press CTRL + C to stop the server...
I also tried
rpcapd://172.16.52.212/3Com EtherLink PCI.
I got the same result. Nothing appears to be
happening. I tried writing the output to a file and
it didn't write the file.
Since these adapter names appeared in the Ethereal
Capture Options Interface drop down list I assumed
that one of these was the name of the adapter; is this
correct or is the adapter name obtained in some other
way?
What else might I be doing wrong?
Thanks for your help.
Jeff
_____________________________________________
From: Silverstein, Jeffrey
Sent: Wednesday, November 03, 2004 12:08 PM
To: 'ethereal-users@xxxxxxxxxxxx'
Subject: can't get ethereal to see another nic in
capture drop down list
Hi, I'm testing out Ethereal on Windows XP by
connecting 2 machines with a crossover cable. I have
installed Ethereal on both machines. When I look at
the list of interfaces in the "Interface:" field in
the dialog box popped up by "Capture->Start", all I
can see is the local interface. When I try to capture
the other interface by entering the IP or the MAC
address, Ethereal gives me an error. This happens no
matter which machine I do this from. What do I need
to do to get both interfaces to appear in the dialog
box?
Thanks,
Jeff
__________________________________
Do you Yahoo!?
Check out the new Yahoo! Front Page.
www.yahoo.com
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users