Wireshark-users: Re: [Wireshark-users] Mac OS X Help
From: "Robert Craig" <robbycraig@xxxxxxxxx>
Date: Thu, 23 Nov 2006 20:22:49 +0000
Thank you for your help.

In response to Steve I have used tcpdump -i en1 and it worked fine. The connection did not drop.

As for wireshark as soon as I hit capture options the connection drops even if I just type in en1.
After further testing I have found that the connection drops but if I start the capture and leaving it running I can then reconnect to the wireless network and it will start capturing the packets.

Thanks again for the help

On 23/11/06, Guy Harris <guy@xxxxxxxxxxxx> wrote:
Robert Craig wrote:
> I have just installed wireshark on my intel duo MacBook using DarwinPorts.
> It starts up fine (as root) but as soon as I click "List available
> capture interfaces..." my wireless disconnects and refuses to reconnect
> whilst wireshark is open.
> Although it works fine for the wired network.
>
> Any suggestions?

Try not using "List available capture interfaces" - capture on en0 for
wired captures and en1 for wireless captures.  Also, don't use the
drop-down list to select an interface in the capture options window -
just type en0 or en1.  That might help.

This is a known problem - or, rather, a consequence of several known
problems.  Some can be fixed in libpcap (I'll look at that), some in
Wireshark (I'll look at that - but those would also need the libpcap
fix, meaning Apple would have to pick that fix up for the system libpcap
or you'd have to somehow get a version of Wireshark built with a fixed
version), and some in the driver for the wireless adapter (somebody in
the group at Apple that does AirPort adapter software would have to look
at that).
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users