> The capture menu is there, but the "Start..." option is grayed out.
If you run "ps -ef" (or "ps ax", if "/usr/ucb/bin" is before "/usr/bin"
and "/bin" in your path) while a "update display as packets come in"
capture is in progress, it should show two Ethereal processes, one named
"ethereal-capture" which is a child of the main one. The child process
is capturing packets, writing them to a file, and sending messages to
the main process over a pipe, telling it that new packets have arrived
and that it should read them from the file and update the display.
If you also do that *after* you hit the "Stop" button and the display
updates for the new column widths, does it show one Ethereal process or
two?
The "Capture:Start" menu item is disabled when an "update display as
packets come in" capture is started (as the capture dialog box is modal,
and as no forking is done for "don't update the display as packets come
in" captures, the menu item doesn't have to be disabled, as the menu bar
itself is unresponsive), and is re-enabled when the parent process gets
an end-of-file indication on the pipe.
If the child ("ethereal-capture") process exits - as it should do, when
the "Stop" button is pressed (the child process, not the parent process,
draws the capture dialog box), its end of the pipe is closed, so the
parent should eventually get an end-of-file indication when reading from
the pipe, so it should declare the capture "done" and re-enable the
"Capture:Start" menu item.
Note that "Capture:Start" and "File:Open" are enabled and disabled in
parallel; if "Capture:Start" is grayed out, is "File:Open" also grayed
out?