Windows rpcapd

From VoIPmonitor.org
Jump to navigation Jump to search

Steps for enable live sniffer as a service on Windows

(tested on 8.1 64b, IP 192.168.88.247)

  1. Instal windows wireshark including wincap driver
  2. Locate winpcap file (c:\Program Files (x86)\WinPcap)
  3. In winpcap folder we create config file for 'Remote Packet Capture' service (and set from which IP we will access this service)
rpcapd.exe -s rpcapd.ini -l 192.168.88.243
press CTRL+C and check existence of file rpcapd.ini
  1. edit rpcapd.ini using any text editor
notepad rpcapd.ini
  1. Start
PC settings->services->remote packet capture->start
  1. we can chec

Steps for enable live capture using rpcap from remote PC

(tested on linux Wheezy, IP 192.168.88.243)