Ethereal-users: [Ethereal-users] Packet capturing from remote machine without rpcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Fri, 07 Jan 2005 10:05:44 +0530
I want to capture packets from a remote device and view it on my machine.
The device has a low memory capacity so ssh and tethereal wont work.
(as mentioned in http://www.ethereal.com/lists/ethereal-dev/200212/msg00265.html)
Also my host machine on which ethereal is to run is on windows.

The solution I have is to capture packets from the remote sniffer and
forward them to my host machine. The packets received are then dumped to a
file with pcap file header in beginning and packet headers for each packet,
ethereal then takes the file as input and displays the data.
The problem with this solution is that packets are not seen at real time and ethereal
must be manually refreshed frequently.
"./(executable) | ethereal -k -i - " works in linux if I dump packets received to stdin,
but this doenst work for windows due to unavailabilty of stdin.
Is there any way else where I can view packets on real time without the need for manual
refresh.

Regards,
Ashwin