First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Remote Tshark PCAP dump.

  • retag add tags

Hi Guys,

I am hoping someone can assist.

I am looking to setup a remote dump of the pcap info that I get off of my VOIP system.

I am running TShark on the VOIP system (Ubuntu) and would like to view the PCAP files off a fileshare with WireShark. The reason for this is the VOIP system has very limited storage so having the packet capture info dump remotely is vital.

Does anyone know if this is possible ?

Kind Regards,

SlayeR_Kev's avatar
1
SlayeR_Kev
asked 2018-04-05 14:55:51 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Does this help? It basically uses dumpcap (the capture engine) on the remote platform (your VoIP box) from the capture host. If you set it up so that the output from the SSH tunnel is put into a file, than that's your capture file. Or load it directly in Wireshark and save from there, if that suits your use case.

Jaap's avatar
13.7k
Jaap
answered 2018-04-05 17:11:40 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer