3

Wireshark has always worked without issue for me, but upon using it on 13.10 I find that as soon as I start a live capture it does nothing, the screen dims, then it crashes.

syslog shows:

wireshark[5616]: segfault at 7fffbc3a3ff8 ip 00007fa83f334284 sp
00007fffbc3a3ff0 error 6 in libgobject-2.0.so.0.3800.1[7fa83f324000+4f000]

If I run wireshark as root, this segfault does not seem to happen. In the past I have always followed the steps here to set various permissions and capabilities to allow wireshark to run as normal user. Do these need to change for 13.10?

My wireshark version is from the repos: wireshark 1.10.2 (SVN Rev 51934 from /trunk-1.10)

Anyone know how to resolve this?

2 Answers 2

11

After attempting to run wireshark from terminal and collecting a log:

wireshark &> out.log

the log was filled with things like

(wireshark:6087): GLib-GObject-WARNING **: invalid unclassed pointer in cast to 'GtkScrollbar'

(wireshark:6087): GLib-GObject-WARNING **: invalid unclassed pointer in cast to 'GtkWidget'

.
.
.

Upon googling these I came across bug1 and bug2, and the solution posted there:

export LIBOVERLAY_SCROLLBAR=0
wireshark

got wireshark running for me.

....................................ASIDE....................................

Quite strange really, as I hate overlay scrollbars and have disabled them anyway, with the command:

gsettings set org.gnome.desktop.interface ubuntu-overlay-scrollbars false

and they don't appear on any of my other applications (e.g. firefox or the terminal), so strange that wireshark is snagging on them.

Also strange that root didn't have issues.

................................................................................

1
  • Worked for me in 14.04 for this error in syslog: wireshark[6878]: segfault at 7fff0f996fe8 ip 00007fa9d0297c95 sp 00007fff0f996fe0 error 6 in libc-2.19.so[7fa9d0218000+1bb000] Mar 4, 2015 at 0:55
1

Just like fpghost said the solution is to make the commands:

$ export LIBOVERLAY_SCROLLBAR=0
$ wireshark

If you want to execute from the Wireshark application icon just replace the Exec= line in the application launcher file at /usr/share/applications/wireshark.desktop with this one:

Exec=bash -i -c "export LIBOVERLAY_SCROLLBAR=0 && wireshark" %f

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .