http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2228
--- Comment #16 from Peter <pva@xxxxxxxxxx> 2008-03-23 14:03:43 GMT ---
Thank you, Bill. I've pushed fixes in unstable branch on gentoo.
(In reply to comment #15)
> The effect is that "dumpcap -w" using libcap can't be killed (signaled)
> by the parent Wireshark only during the short interval until the
> pcap_open_live is completed. After the capabilities are removed, the
> capture can be stopped by Wireshark.
But do I understand correctly that wireshark will try another time to kill
dumpcap and succeed at some point?
Also I don't understand your doubts about dropping capabilities. I think if
capabilities are not required any more it's good idea to drop them in any case,
don't it? So seems that that really fixes the issue (and works here, btw, but
I'll do more tests).
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.