Ethereal-users: Re: [Re: [ethereal-users] Re: Ethereal 0.8.0 captures nothing!!!]
just to add another point of reference the oddity occurred when i tried my
display set to any of the following:
:0.0
127.0.0.1:0.0
<eth0's_ip_address>:0.0
seems to be related to the specific versions of gtk, etc. on rh 6.1, rather
than the mechanics of the x11 display...
hope this helps yet again...
thanks all :)
Peter
Gerald Combs <gerald@xxxxxxxx> wrote:
> On Sun, 2 Jan 2000, Guy Harris wrote:
>
> > > (and i'm positive that the frames are traversing the interface i'm
> > > tracing, they show up in tcpdump, for example)
> >
> > What happens if you build tcpdump with the version of libpcap with which
> > Ethereal is linked? Does it show those frames?
>
> I can duplicate this behavior by running Ethereal remotely. In each
> case below, Ethereal is being run on the remote machine, and displayed
> locally using X-over-ssh. The remote Linux machine is running RedHat 6.1.
>
> - While running on a remote Linux machine with an unpatched libpcap
> Ethereal freezes. 'strace' shows the program hanging on a recvfrom()
> on the capture socket.
>
> - Under Linux with a patched libpcap Ethereal is responsive, but no
> packets show up in the statistics window. 'strace' shows that each
> call to select() on the capture socket returns 0.
>
> - Remote Solaris and OpenBSD sessions behave normally.
>
> - When I add a capture filter to exclude the host name and port number
> in $SSH_CLIENT, everything works as expected.
>
> - At the time the problem with Ethereal is occurring, tcpdump appears
> to capture packets just fine.
>
> The problem doesn't appear to be limited to remote sessions. Another user
> indicated in private email that he sees the same thing while running
> locally.
>
> I'm stumped at this point.
____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1
