Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Wireshark-users: Re: Unable to get tshark to capture packe

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 18 May 2010 14:21:08 -0700
On May 18, 2010, at 2:13 PM, Fisher, AJ wrote:

> As for the HP-UX 11.31 "tshark -p" and without the "-p" flag here is the command/output:
> 
> $ tshark
> tshark: Couldn't load module /opt/iexpress/wireshark/lib/wireshark/plugins/1.0.11/asn1.so: Unsatisfied code symbol 'g_node_insert_before' in load module '/opt/iexpress/wireshark/lib/wireshark/plugins/1.0.11/asn1.so'.
> Capturing on lan0
> tshark: Can't install filter (recv_ack: promisc_phys: UNIX error - Not owner).
> Please report this to the Wireshark developers.
> (This is not a crash; please do not report it as such.)
> 0 packets captured

What's the output with "tshark -p"?  It shouldn't be trying to set "physical promiscuous" mode if you specify "-p", so it shouldn't be saying "recv_ack: promisc_phys: UNIX error - Not owner" with "tshark -p".