Downlaod Pcap file to local machine

How can I download Pcap file from openwrt vm to my local machine. ?

SCP would be the fastest and supported even in default installations of OpenWrt.

3 Likes

Don't even capture on openwrt in the first place.

Run wireshark locally, and use its sshdump facility. set its capture interface to the one on openwrt you want to capture on (corresponds to tcpdump -i).

Set wiresharks path to ssh private key which you have locally and whose public half you copied to openwrt (for passwordless ssh login).

Done.

Sometimes requires the ssh -O switch, if openwrt lacks the correct scp agent installed.

SCP is supported in dropbear, I never had to use anything particular to make it work.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.