Reputation
244
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 3
Newest
 Yearling
Impact
~32k people reached

  • 0 posts edited
  • 0 helpful flags
  • 4 votes cast
Feb
16
answered How to set wired interface on Monitor Mode?
Jan
20
comment Wireshark unable to see wireless adapter or ethernet (Macbook Pro 2012)
So this is Ubuntu on the MacBook Pro (not OS X)? What happens if you run the command sudo dpkg-reconfigure wireshark-common and then try to run Wireshark?
Dec
28
answered What does “Compression Method : null(0)” mean in Client Hello?
Dec
25
answered Running Wireshark (Monitor Mode) using Live DVD
Dec
11
comment Find outr which IPs are from program and which IPs are from addons
"I assumed that it translates network calls made by guest OS to the host OS system calls" I wouldn't assume that; VMware isn't Wine, it's a program that emulates a PC on which you run a full guest operating system which runs your guest applications. VMware Fusion uses BPF on OS X to emulate a network adapter; my guess is that it uses either PF_PACKET sockets or a special driver for that purpose on Linux.
Dec
5
comment Find outr which IPs are from program and which IPs are from addons
"Run the application under the control of strace which logs all system calls, including attempts to connect." Given that "This is a game with add-ons runing under vmplayer Windows guest.", you presumably mean strace for Windows. Solution 2 might work, if "the application" in "Run the application as a different user" refers to VMware Workstation (which is running on Linux) rather than the game (which is running on Windows in a virtual machine).
Nov
30
answered How to enable IPV6 packet capturing in WireShark at the same time as IPV4?
Nov
14
comment Configure Wireshark for PPPoE connection
If sudo dpkg-reconfigure wireshark-common doesn't work, that sounds like a bug in the Ubuntu package; report it to the Ubuntu maintainers.
Nov
13
awarded  Yearling
Nov
12
answered Configure Wireshark for PPPoE connection
Aug
29
answered Promiscuous mode not working with ubuntu and wireshark
Mar
29
comment Wireshark Openflow support not working
...unless you install your own version of Wireshark, rather than relying on the OS supplier.
Mar
29
answered Wireshark Openflow support not working
Feb
5
comment Problem linking against pcap.h
I.e., no, the error does not indicate that it could not find pcap.h; if it couldn't find pcap.h, it would have said so. It indicates that, for some reason, it couldn't find pcap_breakloop() in libpcap; what does the command tcpdump -h print?
Dec
4
awarded  Commentator
Dec
4
comment Wireshark is not able to capture on any of the interfaces
Or, given that Ubuntu is a Debian derivative, just use dpkg-reconfigure wireshark-common (you may have to do it as root, for example using sudo), as suggested by a page linked to from the source for this.
Oct
27
answered How to update wireshark interface list?
Aug
14
answered How To Apply Wireshark Patch
Aug
10
comment How do I run wireshark, with root-privileges?
At approximately line 40 of Wireshark's doc/README.packaging file, it says "WIRESHARK CONTAINS OVER TWO MILLION LINES OF SOURCE CODE. DO NOT RUN THEM AS ROOT." Take that statement very seriously.
May
31
comment Wireshark HTTP request methods for GET and POST on wlan0
Because Wireshark, if configured to do so, attempts to resolve the IP address to a host name, which usually means doing the reverse DNS query in question. Whatever host resolution mechanism it uses on your OS (probably some flavor of Linux, from the "wlan0" name for the interface) is probably recognizing the local host IP address (from an /etc/hosts entry?) and giving the local host name, and finding DNS entries for the servers you're talking to on the Internet, but not finding a DNS entry for the other hosts on your network.