I have Tomato v1.28.0000 MIPSR2-123 K26 Max on an ASUS RT-N12. I found an old tcpdump version 3.9.8. I can capture packets and "tcpdump -r capture.pcap" seems to read the file okay. I transfer the file using WinSCP in binary mode. The file transfers over in the original size okay, I use the same program to transfer tcpdump over so it seems to be working ok, but the latest version of Wireshark for Win 7 doesn't read it, I get "The file "capture.pcap" could not be opened: Unknown error." I've tried numerous other commands in tcpdump too. I would like to try and get rpcapd to work, but I can't find any precompiled binaries for it or tcpdump either. All old posted links are broke or the websites don't exist. I've tried to build my own in the router but wget doesn't work, and the build fails with an error about specifying some mode. Does anyone have any current instructions to get rpcapd functioning with actual working links to files? I could probably make due with the instructions that are out there already, it's just hard to find the files.