Ethereal-users: Re: [Ethereal-users] RE: cannot see "live capture" --> Resolved for me

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 15 Aug 2005 18:27:56 +0200
Flashfox wrote:

I had the same "cannot display live updates" problem that was reported... well, at least the same symptoms.

What I was seeing:

1. Configured Ethereal  using VIEW, PREFERENCES, etc.
2. Main menu, selected CAPTURE
3. Clicked on START
4. No activity was being displayed. However, when I stopped the capture, I received only 1 page of data.

#4: Are you quite sure that really no more packets were captured?

It's more probable that you just didn't saw them. This might be caused by a known bug (http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=220), that sometimes (unfortunately not well reproducible) the scrollbar of the packet list is missing. You can make it reappear by slightly resizing the packet list.

What does the packet numbers in the statusbar show?

Here is how I resolved it:

1. Click on CAPTURE
2. Select NIC Card
3. On the same screen, click on PREPARE in the NIC Card
4. Check UPDATE LIST OF PACKET IN REALTINE
5. Check AUTOMATIC SCROLLING
6. Check other options as desired
7. Select START CAPTURE

What I did wrong:

I had NOT clicked on the "prepare" button in the NIC selection area, hence the problem.
You'll first have to change the settings once before working. You can do this in the capture section of the preferences (don't forget to save :-).

These are disabled by default as this will (slightly) cost performance, so the probability that packets are dropped while capturing raises.

Maybe I missed something, but previous versions of Ethereal acted differently. The "preferences" section automatically popped-up when you selected the capture function.
That way was added (in one of the last releases), as some people (including me) often start a new capture without the need to change the capture options.

You can simply use the capture options just like before.

So yes, this was added recently.

Regards, ULFL