Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Windows dumpcap -i TCP@<IP>

From: James Ko <jim.list@xxxxxxxxxxx>
Date: Tue, 18 Sep 2018 00:21:43 +0000

Hi,


I am trying to connect to a remote PCAPNG stream from Windows using the TCP@ socket interface but the connection closes immediately after connecting.  The same dumpcap command on linux works just fine to the remote TCP socket.


No errors indicating any failure are printed from dumpcap.exe

C:\>"\Program Files\Wireshark\dumpcap.exe" -i [email protected] -w -

Capturing on '[email protected]'

dumcap:


C:\>


On the remote end running in linux I see a connect and disconnect with EPOLLHUP event.


Has anyone else tried or have remote TCP socket connections working with dumpcap in Windows?


James