First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Disable rpcap-interface discovery on startup

Hi together,

is there any hidden option to disable the rpcap-interface discovery on Programm startup.

The newest Wiresahrk Version store all known remote interfaces inside the "recent-common" file wich is located "C:\Users\<user>\AppData\Roaming\Wireshark"

After the comment: "######## Recent remote hosts, cannot be altered through command line ########"

The Problem is, that Wireshark search on very Startup for all these rpcap Interfaces which are not reachable anymore and the startup process take so much of time and often the programm breaks and i must restart it again.

I hope there is any advanced configuration to doable this behaviour

thank you, Basti

Basti's avatar
3
Basti
asked 2018-09-18 08:46:29 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Has anybody a solutions for this problem?

Basti's avatar Basti (2018-11-30 14:33:19 +0000) edit

Stop Wireshark, try deleting the entries from the file, restart Wireshark.

grahamb's avatar grahamb (2018-11-30 14:47:28 +0000) edit

@grahamb

Stop Wireshark, try deleting the entries from the file, restart Wireshark. This works only for the next startup.

If i add a remote interface in the next session it will also be cached in the config file. If i start wireshark then again he try to connect to the cached rpcap ip.

From my understanding this make in the most of scveanrios no sense. So i preferred a config flag to activate/deactivate this behaviour

thanks you Basti

Basti's avatar Basti (2018-11-30 15:28:29 +0000) edit

Then you would need to either submit a change to the source that does what you want (see the Submitting Patches page on the Wiki, or you can submit an enhancement request on the Wireshark Bug Tracker.

grahamb's avatar grahamb (2018-11-30 16:06:26 +0000) edit

Hey Ho,

since Wireshark version 3.4.x it will not help anymore to mark "recent_common" with write-restriction in the windows filesystem. Now the Wireshark will prompt an error message that the named file is not writable :/

Anybody who wants to fix them? I think a good possibility would be a configuration if Wireshark should store old interfaces yes/no.

Thanks and greetz

Basti's avatar Basti (2022-04-26 10:01:42 +0000) edit
add a comment see more comments

1 Answer

0
Basti's avatar
3
Basti
answered 2023-11-21 08:34:31 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer