Typically, this is used with aįilter that only keeps rtp packets. ssh "pcapture -raw -i eth1.100" | wireshark -k -i -įorces capture to interpret all packets as rtp packeta. ssh "pcapture -raw -i eth1 not broadcast and not multicast" | wireshark -k -i - Capture from the uplink interface of the Mediatrix unit, the packets of the VLan for Top Starting a Network Capture Remotely On MacOS or Linux plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -i eth1 host 10.5.128.11 or host 10.5.128.4 " | wireshark -k -i. plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -i eth1 ether host 00:90:F8:07:5A:6D " | wireshark -k -i -Captureĭestination is the units whit the 10.5.128.11 or host 10.5.128.4 IPĪddresses. The packets going through the Ethernet port eth1, for traffic for which the source or theĭestination is the unit with the 00:90:F8:07:5A:6D MACĪddress. plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1 dst port 5060 " | wireshark -k -i -Capture plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1 src port 5060 " | wireshark -k -i -CaptureĮth1, but using port 5060 as the destination
plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1 port 5060 " | wireshark -k -i -Capture plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1 -t rtp " | wireshark -k -i -CaptureĮth1, but using port 5060 only (either source orĭestination). plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1.100" | wireshark -k -i -Captureįrom the uplink interface of the Mediatrix unit, the packets going through the Ethernet port plink.exe -ssh -no-antispoof -pw "administrator" "pcapture -raw -i eth1 not broadcast and not multicast" | wireshark -k -i -Captureįrom the uplink interface of the Mediatrix unit, the packets of the VLan for which the VlanId Capture from the uplink interface of the Mediatrix unit, and filtering out the
0 kommentar(er)
