Wireshark-users: [Wireshark-users] trying to capture remote traffic

Date: Fri, 4 Jun 2010 09:18:53 +0200



Hello,

I'm testing wireshark. It's installed on Windows XP Pro SP3. First I
captured local traffic. No problem.

Then I've been trying to capture remote traffic but I failed. To do this, I
installed on a second computer Winpcap 4.1.1. I ran the service "remote
..." with services.msc. I launched Wireshark on the first PC, set remote
capture, enter IP adress of the second PC and first tried with no
authentication. With no success.
So, I tiyed with authentication but I don't know which user account used. I
tried with the user account of the target PC then with the user account of
the first PC then with the admin account of the domain. No success.

So I stoppped the remote service and I executed this DOS command on the
target PC : rpcacd -l IP_adress -n and of course I launched  Wireshark and
test remote capture with no authentication. No success. But the error is
interesting. It talks about "known host".

what can I do more ?

And sorry for my bad english

best regards

Jerome