Wireshark · Ethereal-users: Re: [ethereal-users] Error when starting capture.

[Simon Bond <bondsc@xxxxxxxxx>]

On Mon, 03 May 1999, you wrote:
> Please add one line in your capture.c file. On line 501, please add
> 
>    printf("Libpcap returned: %s\n", err_str);
> 
> 
> I am hoping that libpcap is returning a string explaining the error. If
> so, we should see that string in the xterm from which you start
> ethereal. Please let me know what happens.
> 

It came back with "socket: socket type not supported".

Which kind of gave it away, so one  "modprobe af_packet"  later and ethereal was
up and running.

So now I have another bug to report :)

I selected "tools - capture" and filled in:

Interface:	eth0
Count:		0 (infinite)
Filter:		
Capture length:	68

and off it went...

Trouble is, I can't stop it (the "stop" button doesn't appear to be attached to
anything). Actually, at that point, the program completely stops responding to
events (other than displaying a packet count in the small dialog window). I
have to kill it to get out (doesn't even respond to a "close" event).

It's OK if I choose:

Count:	10 (for example)

and wait for 10 packets...

Anyway, the actual packet information displayed by ethereal is great. It's
really developing into a useful program.

Thanks for all your previous help,

Simon Bond