Wireshark-users: Re: [Wireshark-users] tshark & loopback

From: "Tennis Smith" <tennis@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 20 Mar 2008 12:48:30 -0500
[TNS>] Thanks for the reply, Steve.  See inline.
[TNS>] -T
> I run a series of tests via a loopback interface on Fedora 7.  Is 
> there any way to start tshark and have it monitor activity on the 
> loopback, even if traffic is not yet being passed?

You should be able to just start it as tshark -i lo0 and it will wait 
for traffic.

[TNS>] Yeah, I thought so to, but even from the 'root' id, I get this:
> tshark -i lo0
Running as user "root" and group "root". This could be dangerous.
Capturing on lo0
tshark: The capture session could not be initiated (SIOCGIFHWADDR: No such device).
Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.
0 packets captured
tnsfc64:/home/tennis
> ifconfig 
eth0      Link encap:Ethernet  HWaddr 00:1A:A0:3B:BA:63  
          inet addr:10.1.3.207  Bcast:10.1.3.255  Mask:255.255.255.0
          inet6 addr: fe80::21a:a0ff:fe3b:ba63/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:10292473 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11689855 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:3099078860 (2.8 GiB)  TX bytes:4613934958 (4.2 GiB)
          Interrupt:17 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:923403 errors:0 dropped:0 overruns:0 frame:0
          TX packets:923403 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1100303931 (1.0 GiB)  TX bytes:1100303931 (1.0 GiB)




Steve

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users