Wireshark over Wireless
I am finding that sniffing packets (promiscuous mode) in wireshark kills my wireless connection. I can bring wireless back up, but I get an initial failure, whereupon "Try Again" seems to work. An annoyance, at any rate. Over wired, everything work fine. -Fred 2.0ghz c2d macbook (black)
Known problem, I'm afraid. Fixed in next release. :) - Jordan On Apr 22, 2007, at 6:03 PM, Fred Dushin wrote:
I am finding that sniffing packets (promiscuous mode) in wireshark kills my wireless connection.
I can bring wireless back up, but I get an initial failure, whereupon "Try Again" seems to work. An annoyance, at any rate.
Over wired, everything work fine.
-Fred 2.0ghz c2d macbook (black) _______________________________________________ macports-users mailing list macports-users@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo/macports-users
Hi Fred In the interim (that recently got extended, I was looking forward to that fix in 10.5 libpcap) Andreas Fink has provided a statically built binary built against a fixed libpcap at http://www.finkconsulting.com/page7.php
Note: Wireshark was linked to a static libpcap to overcome an issue of the WLAN going offline on MacBook Pro's when you want to capture IP packets on the WLAN you are connected to. The static cvs version of the library doesnt have this effect except when you capture on the wtl interface (you will see the WLAN frames in this case too) where its normal to loose connectivity. If you choose "Interface" from the menu however your WLAN will still disconnect. Choose "Options" instead and choose the interface there. So MacBook Pro users (like me) will be happier than before (thanks Guy for finding the workaround...)
It installs into /usr/local/bin/wireshark and is happily co-existing with my MacPorts installation (apart from using all that disk space for 2 copies of all the dependencies). It works fine for me, Captures on en0 without dropping en1. Now, if only I could figure out how to use Scapy without dropping my wireless on launch (it uses py-pylibpcap and libpcap from MacPorts) I would be OK. Regards Mike On Apr 23, 2007, at 2:42 PM, Jordan K. Hubbard wrote:
Known problem, I'm afraid. Fixed in next release. :)
- Jordan
On Apr 22, 2007, at 6:03 PM, Fred Dushin wrote:
I am finding that sniffing packets (promiscuous mode) in wireshark kills my wireless connection.
I can bring wireless back up, but I get an initial failure, whereupon "Try Again" seems to work. An annoyance, at any rate.
Over wired, everything work fine.
-Fred 2.0ghz c2d macbook (black) _______________________________________________ macports-users mailing list macports-users@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo/macports-users
_______________________________________________ macports-users mailing list macports-users@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo/macports-users
participants (3)
-
Fred Dushin
-
Jordan K. Hubbard
-
Mike Savory