Wireshark-bugs: [Wireshark-bugs] [Bug 2228] Stop capture doesn't work
Date: Thu, 20 Mar 2008 02:40:15 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2228


Bill Meier <wmeier@xxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|Critical                    |Blocker




--- Comment #2 from Bill Meier <wmeier@xxxxxxxxxxx>  2008-03-20 02:40:13 GMT ---
** IMHO this is a blocker which should be fixed
** before the 1.0 release....
** (Do others agree ?)

After doing a little debugging (on my Fedora 8 Linux system):

dumpcap does not see the SIGUSR1 signal generated by 'Capture ! Stop' in
wireshark when dumpcap is running as suid root and wireshark is running as a
normal user process with no special privileges.

I'm guessing that a SIGUSR1 from a non-privileged process to a privileged
process is not allowed  ??

(I do note that after starting a background suid root dumpcap from the command
line of a normal user process, a 'kill -USR1 <prcid>' from the command line
fails).

Assuming that the above is correct, I don't know the right way to fix this.
Send a 'stop' message on the pipe from wireshark to dumpcap ?
Close the pipe ??
??

I think I need to leave this fix to someone who is familiar with all of this.

Bill


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.