I am working on an assignment wherein I need to write TCL scripts to capture wireshark packets running on Windows XP.
To start the wireshark capture, one needs to open wireshark.exe and then go to capture->Interface->start.
Before writing script, I tried running manually. Below are the steps, I followed -
- Open command prompt from start->Run and type cmd.
- Go to path where executable of wireshark is stored( example - c:\program files\wireshark).
- run wireshark.exe -i 192.168.1.2
Wireshark application is opened. But it does not start capturing the packets.
I think one needs to do something from the wireshark application and not from the MS-DOS. Can anyone tell me how to start wireshark capture from MS-DOS?
Can anyone also suggest me some other way to start capturing wireshark packets without manually doing it.