Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Mac OSX new MacBook Pro

From: Mike Savory <msavory-shark@xxxxxxxxx>
Date: Mon, 30 Oct 2006 08:00:33 -0800
Thank you Guy

Yes you are correct, sudo tcpdump does also drop the connection on en1 as it starts capturing on en0, weird
Tshark  version is the current MacPorts - TShark 0.99.3a

Just rebuilding svn so I can grab a source...  ;-)
(its a very new laptop)

Mike


On Oct 30, 2006, at 1:23 AM, Guy Harris wrote:

Mike Savory wrote:
Details below were just to show that the build on my Laptop is using
libpcap 0.9.4 my PPC laptop uses 0.8.3

I can capture packets and remain attached to my wireless running
perfectly

sudo tcpdunp -i en1

When I run

sudo tshark -i en1

It immediately drops the wireless.

What if you run

	sudo tcpdump

without a "-i" argument? It will probably drop the wireless connection,
so the problem isn't purely a Wireshark problem.

And what version of TShark are you running?  What does "tshark -V"
print? A version I have built from recent SVN source doesn't open wlt1
if you run it with "-i en1", so that version shouldn't cause the
connection to be dropped.
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users