Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12952] [feature-request] Support for sshdump using tcpdump rather than dumpcap

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 2 on bug 12952 from djcanadianjeff@gmail.com

diff --git a/extcap/sshdump.c b/extcap/sshdump.c
index c506a1f..500bc34 100644
--- a/extcap/sshdump.c
+++ b/extcap/sshdump.c
@@ -165,8 +165,13 @@ static ssh_channel run_ssh_command(ssh_session sshs, const
char* capture_bin, co
     if (count > 0)
         count_str = g_strdup_printf("-c %u", count);

+    if (quoted_bin == "tcpdump") {
+    cmdline = g_strdup_printf("%s -i %s -U -w - '%s %s'", quoted_bin,
quoted_iface, quoted_filter,
+        count_str ? count_str : "");
+    } else {
     cmdline = g_strdup_printf("%s -i %s -P -w - -f %s %s", quoted_bin,
quoted_iface, quoted_filter,
         count_str ? count_str : "");
+    }

     g_debug("Running: %s", cmdline);
     if (ssh_channel_request_exec(channel, cmdline) != SSH_OK) {

---

      You are receiving this mail because:

• You are watching all bug changes.