Ethereal-users: Re: [ethereal-users] compilation questions and possible bug...
> 1) i'm trying to compile ethereal 0.5.0 on a debian system but for
> .configure, get:
>
> checking for net/bpf.h... no
> configure: error: Header file net/bpf.h not found.
>
> i guess this is because i don't have the berkeley packet filter? i
> know there is a debian package that works, but it is not the latest
> version of ethereal. any help for compiling would be appreciated.
You probably need to install "libpcap". See step 2 in the README file's
"Installation Checklist (Long)".
Perhaps we should eliminate the "Installation Checklist (Short)", which
doesn't mention making sure you have GTK+ and "libpcap" installed, in
favor of "Installation Checklist (Long)", which does; that's a Not
Infrequently Asked Question, which suggests that it may be too easy to
miss that step.
Alternatively (or in addition), perhaps we should add non-generic
installation instructions to the INSTALL file.
There may be packages for "libpcap" if you don't want to install from
source.
> 2) i've manage to get the latest version working on freebsd but the
> -t a option doesn't appear to work (though it does for version 0.4.1
> on both freebsd and debian). what happens is that the time column
> displays 0.000000 for each row.
Damn. Looks like a bug. I'll check into it....
> 3) it doesn't appear to handle files larger than a certain size --
> i've found that 20 meg files cause core dumps. i realize i can use
> tcpdump to make the files ethereal deals with smaller, but it would be
> nice not to have to do this. any thoughts on this matter?
That sounds like another bug - do you have GDB handy? If so, a stack
trace might be handy - or perhaps you could send one of the developers
the core dump and we can try it out.
