ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] running ethereal-0.9.0

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 5 Feb 2002 17:50:26 -0800 (PST)
> I'm trying to run ethereal-0.9.0 on Solaris 8. I downloaded the code from the 
> sunfreeware site.

Where does the sunfreeware.com site have source code for Ethereal 0.9.0?

>I built libpcap, glib and gtk before building ethereal. The 
> ethereal `make' and `make install' seemed to go ok - but I did seem to 
> have problems with making `docs' (see the attached files).

Are you sure you have Perl completely installed?  If so, what version? 
In what directory is it installed?  Does your command search path
include that directory?

Perl 5, at least, should come with "pod2man".

> I downloaded a sample capture file (genbroad.snoop) from the ethereal website 
> and attempted to analyse the file. The problem is that, no matter what file I 
> attempt to analyse, ethereal seems to hang. I've tried running it two ways:
> 
> 1) starting ethereal from the command line and loading the sample file from the 
> file menu
> 
> 2) starting etheral from the command line using the -r option to specify the 
> file

Have you tried running it using the "-n" flag?

> Neither method works - ethereal just seems to hang. Has anyone
> experienced the same sort of problem?

Many people have.  The problem is usually the result of Ethereal trying
to find host names corresponding to network addresses in the capture
file; that process can cause Ethereal to hang for a while (not forever -
don't assume that it was hanging forever) waiting for the OS routines
that look up host names to return, as those routines are waiting for
some DNS server to reply, and the DNS server might not be up and
running.

> If so, can you offer any advice on solving the problem?

The "-n" flag disables resolution of network addresses to host names, as
does turning off the "Enable network name resolution" option in the
dialog box popped up when you use the "Open" item from the "File" menu.

Try that.