I am using wireshark version 1.10.3 on windows 7 x64 enterprise. I am trying to capture all outbound UDP traffic, in particular syslog traffic.
I have tried a capture filter UDP, but all I can see it DNS and NTP traffic.
I have used the following script to send UDP messages to a remote syslog server.
$syslogClient = new-object system.net.sockets.udpclient syslog_server_ip, 514;
$message = "Test syslog $(get-date)"
[byte[]] $rawMSG = $(new-object System.Text.ASCIIEncoding).GetBytes($message)
$syslogClient.Send($rawMSG, $rawMSG.Length);
$syslogClient.close();
The messages get to the syslog server but I cannot see them within the wireshark capture window.
Has anybody managed to capture outbound syslog messages within wireshark, or is there something that I am missing?
Regards, David