Re: [Ethereal-users] Packet capturing from remote machine without rpcap

[Guy Harris <gharris@xxxxxxxxx>]

ashwin.shirvanthe@xxxxxxxxx wrote:

> Is there any way else where I can view packets on real time without the 
> need for manual refresh.

Implement rpcap on the remote device?  You said "without rpcap" in the 
subject line, but why rule that out?  The only reason you give for not 
using ssh and tethereal is that the device has a low memory capacity; 
does that mean "it's a box running an OS that could, in theory, run ssh 
and tethereal, but it has limited memory", in which case that OS might 
run the rpcap daemon as well (I think it runs on Linux and FreeBSD, at 
least), or does it mean "it's a box running a specialized OS to fit in 
the limited memory", in which case it might still be possible to port 
the rpcap daemon to it?