Hello,
I'm testing wireshark. It's installed on Windows XP Pro SP3. First I
captured local traffic. No problem.
Then I've been trying to capture remote traffic but I failed. To do this, I
installed on a second computer Winpcap 4.1.1. I ran the service "remote
..." with services.msc. I launched Wireshark on the first PC, set remote
capture, enter IP adress of the second PC and first tried with no
authentication. With no success.
So, I tiyed with authentication but I don't know which user account used. I
tried with the user account of the target PC then with the user account of
the first PC then with the admin account of the domain. No success.
So I stoppped the remote service and I executed this DOS command on the
target PC : rpcacd -l IP_adress -n and of course I launched Wireshark and
test remote capture with no authentication. No success. But the error is
interesting. It talks about "known host".
what can I do more ?
And sorry for my bad english
best regards
Jerome
