If you really need it, you may try analyzer to do the remote capture. It should also work with the current version of Wireshark and WinPcap 4.x. This feature will not work with WinPcap 3.1 it has been tested with with Ethereal 0.10.13 + WinPcap 4.0 alpha 1 using a Cisco MDS 9216 switch's fcanalyzer as the the remote capture device, and does work. This page is to collect information experienced while trying to bring this feature to life. Pre-filtering the traffic has the advantage of obtaining the desired result much faster with Wireshark or Webshark.The remote capture feature of WinPcap 3.1 is currently not working together with Wireshark!!! Then all modules of the Multimeter can be used to search for exactly the traffic of interest.Īfterwards you can save the selected traffic as a pcap file by clicking the 'Capture PCAP' button (see screenshot) and then start analyzing the trace in Wireshark or, depending on the version of your Allegro Network Multimeter, in the integrated Webshark.Īs you can see, by using the Allegro Network Multimeter, a pcap can be analyzed rapidly and easily without losing Wireshark’s advantages. Click the ‘Analyze PCAP’ button to start analysis (see screenshot).Īfter less than a minute, the four million packages stored on the USB stick are analyzed. The pcap then appears in the storage overview. The file is downloaded to the Allegro Network Multimeter with a USB stick for subsequent pcap analysis.

This isolation of the desired traffic or the incorrect traffic flows is achieved by the analysis modules integrated into the Allegro Network Multimeter. Therefore, you should only select the part of the traffic where the problem has been identified before analysing it in the usual way in Wireshark. Similar times are to be expected even when a filter is used.

For example, a sample file containing three million packets can be read by Wireshark in 30 seconds, whereas a slightly larger one with four million packets takes more than eleven minutes. The problem with Wireshark is that as soon as a pcap exceeds a certain size, it takes longer to analyze the packets. Finding a fault can be tedious via Wireshark.

How to save as pcap wireshark