Page 1 of 1

Cannot capture packet on EVE using Wireshark

Posted: Tue Nov 20, 2018 4:46 pm
by namhai5993
Hi all,
I can't capture packet on EVE.
I get msg as show in attached image.
Can anyone help me to resolve it.
Thank in advance!

Re: Cannot capture packet on EVE using Wireshark

Posted: Tue Nov 20, 2018 9:43 pm
by Uldis (UD)
I see behind your capture, that in CMD is access denied!!

this means your eve root password does not match with wireshark wrapper password.

wireshark wrapper is in
C;/program files/eve-ng/
wireshark_wrapper.bat

edit it and all will wotrk

Uldis

Re: Cannot capture packet on EVE using Wireshark

Posted: Wed Nov 21, 2018 3:17 pm
by namhai5993
Thank for your help!
I already edit root password in wireshark_wrapper.bat and I have resolve my issue.

I have another issue.
Now I am using sCRT to access devices, but I would like to use putty.
I run file win10_64bit_putty but it still user sCRT to access devices.
This is win10_64bit_putty:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Classes\Putty.telnet]
@="telnet"

[HKEY_CURRENT_USER\SOFTWARE\Classes\Putty.telnet\DefaultIcon]
@="C:\\Program Files\\EVE-NG\\putty.exe, 0"

[HKEY_CURRENT_USER\SOFTWARE\Classes\Putty.telnet\shell]

[HKEY_CURRENT_USER\SOFTWARE\Classes\Putty.telnet\shell\open]

[HKEY_CURRENT_USER\SOFTWARE\Classes\Putty.telnet\shell\open\command]
@="\"C:\\Program Files\\EVE-NG\\putty.exe\" %1"

[HKEY_CURRENT_USER\SOFTWARE\Putty]

[HKEY_CURRENT_USER\SOFTWARE\Putty\Capabilities]

[HKEY_CURRENT_USER\SOFTWARE\Putty\Capabilities\URLAssociations]
"telnet"="Putty.telnet"

[HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications]
"Putty"="Software\\Putty\\Capabilities"

[HKEY_CURRENT_USER\SOFTWARE\Classes\telnet\shell]

[HKEY_CURRENT_USER\SOFTWARE\Classes\telnet\shell\open]

[HKEY_CURRENT_USER\SOFTWARE\Classes\telnet\shell\open\command]
@="\"C:\\Program Files\\EVE-NG\\putty.exe\" %1"

Can you help me to resolve it.
Thanks!

Re: Cannot capture packet on EVE using Wireshark

Posted: Wed Nov 21, 2018 7:07 pm
by Uldis (UD)
you can set any telnet program to be as default

Re: Cannot capture packet on EVE using Wireshark

Posted: Wed Jul 17, 2019 6:54 pm
by radchin
Hi, All!

When capturing the port, I get the following error message.

Please tell me what is the reason for this error and how can I fix it?

Re: Cannot capture packet on EVE using Wireshark

Posted: Thu Jul 18, 2019 10:31 am
by Uldis (UD)
Make sure if you have winclient pack installed, as well if wireshark is installed in default location
and root password in wireshark_wrapper must match with yours !

We have live support
http://www.eve-ng.net/live-helpdesk

use google account or create bew to join chat

Re: Cannot capture packet on EVE using Wireshark

Posted: Fri Jul 19, 2019 12:39 pm
by radchin
I apologize for my poor English.

After some research, I managed to find out that plink.exe cannot connect to the eve-ng host. And so it failed to connect to the node interface.
At the same time, there were no problems with the username "root" and the password "eve".

I thought that this could be related to customization putty.ehe. Putty.ehe settings are stored in the windows registry.

HKEY_CURRENT_USER\Software\SimonTatham\PuTTY

After removing them, everything worked. Wireshark began to capture traffic on the interface

Many thanks to Uldis (UD) for answering my question. :D