Wireshark-dev: [Wireshark-dev] Windows dumpcap -i TCP@<IP>
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: James Ko <jim.list@xxxxxxxxxxx>
Date: Tue, 18 Sep 2018 00:21:43 +0000

Hi,


I am trying to connect to a remote PCAPNG stream from Windows using the TCP@ socket interface but the connection closes immediately after connecting.  The same dumpcap command on linux works just fine to the remote TCP socket.


No errors indicating any failure are printed from dumpcap.exe

C:\>"\Program Files\Wireshark\dumpcap.exe" -i TCP@192.168.1.100 -w -

Capturing on 'TCP@192.168.1.100'

dumcap:


C:\>


On the remote end running in linux I see a connect and disconnect with EPOLLHUP event.


Has anyone else tried or have remote TCP socket connections working with dumpcap in Windows?


James