Open the Services window on the remote computer and click Start. This service is disabled by default.
Click the Capture Options in the local machine link in Wireshark, then select Manage Interfaces.
Select the Remote Interfaces tab in the Interface Management window. Enter the address of the remote system and 2002 as the port in Wireshark: Remote window. The local computer must have access to port 2002 on the remote computer to connect, so this port needs to be open in a firewall. Click OK when finished
After connecting, select an interface on the remote system from the Interface drop-down box. Click Start after selecting the interface to start the remote capture.