Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6002] New: Cannot Live-capture VirtualBox network packets

Date: Tue, 7 Jun 2011 00:10:55 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6002

           Summary: Cannot Live-capture VirtualBox network packets with
                    Wireshark; pipe problem
           Product: Wireshark
           Version: 1.6.0
          Platform: Other
        OS/Version: Debian
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: al4321@xxxxxxxxx


Build Information:
Version 1.6.0rc2 (SVN Rev Unknown from unknown)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.20.1, with GLib 2.24.2, with libpcap 1.1.1, with
libz 1.2.3.4, with POSIX capabilities (Linux), without libpcre, without SMI,
without c-ares, without ADNS, without Lua, without Python, with GnuTLS 2.8.6,
with Gcrypt 1.4.5, with MIT Kerberos, without GeoIP, without PortAudio, without
AirPcap.

Running on Linux 2.6.32-5-openvz-amd64, with libpcap version 1.1.1, with libz
1.2.3.4, GnuTLS 2.8.6, Gcrypt 1.4.5.

Built using gcc 4.4.5.
--
Hi,

Host: Debian Linux 6.0, x64. VBox 4.0.51 (and stable 4.0.x series).
Wireshark 1.6.0-rc2 (also tried stable 1.2.x series)

VirtualBox set with traffic capture:
$ VBoxManage modifyvm "my VM" --nictrace1 on
$ VBoxManage modifyvm "my VM" --nictracefile1 /tmp/mydata.cap

The live capture command is this one:
$ tail -f -c +0b /tmp/mydata.cap | wireshark -k -i -

I get:
"No packets captured!"

But when I separate those into 2 commands, it works:
$ tail -f -c +0b /tmp/mydata.cap > /tmp/123.cap
$ wireshark /tmp/123.cap

Such problem doesn't exist with other emulators (Dynamips), so with
Dynamips I can enjoy live traffic updates.
I don't know who to blame in this case.

Any ideas?
--
-Alexey Eromenko "Technologov", 07.Jun.2011.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.