Wireshark-users: Re: [Wireshark-users] Remote PCAP capture in active mode?

From: chuck c <bubbasnmp@xxxxxxxxx>
Date: Fri, 17 Nov 2023 10:38:13 -0600
No support for remote capture when the remote rpcapd is in active mode.



On Fri, Nov 17, 2023 at 10:23 AM David Luu <mangaroo@xxxxxxxxx> wrote:
Hi,

I'm referring to the Wireshark integration of RPCAP protocol,
https://www.winpcap.org/docs/docs_40_2/html/group__remote.html.

I know there is remote interface option in Wireshark for this. But
it's not clear what modes are supported. I found the following posts:

https://winpcap-users.winpcap.narkive.com/WRGlvFNn/winpcap-rpcap-active-mode

where the answer wasn't helpful and appeared to refer to passive mode
in actuality. And we have this

https://www.wireshark.org/lists/wireshark-users/201011/msg00135.html

which mentioned no Wireshark support for it yet. That was over 10
years ago. Has anything changed since or we still don't have active
mode support yet?

If no support still, anyone know if there is an ETA for this or if
it's on the roadmap? Or is this a question I/we have to post onto the
Wireshark developers mailing list?

If there is support, where can I find documentation on how to use
active mode with Wireshark?

Regards,
David
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe