I have 2 machine M1 and M2 running on Debian 8.0 located in 2 remote network N1 and N2
M1 is capturing packets continuousl in N1 and has a known static IP.
M2 is accessing the capture remotely from N2 by connecting to M1.
What is the most common way of doing remote capture and implementing this system?
The only solution I have now is to use a simple dumpcap pipe to
openssl
and thennetcat
:On M1
tshark -w - | openssl enc -des3 | nc -l 1234
On M2
nc <M1 IP> 1234 | openssl enc -d -des3 > capture.pcap
I still cannot figure it out how to do it with ssh
.