Re: [Wireshark-users] Gtk-WARNING **: cannot open display
Thanks all this is working now:) On 7/13/07, Guy Harris [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: Hi, i got this error when i run wireshark, can anyone point out what i'm not doing right, Thanks. Platform:mac osx 10.4 installed wireshark thru macport Have you installed X11? If not, that's what you didn't do right. If you have installed X11, is X11 running? If not, that's what you didn't do right. If X11 is running, have you set the DISPLAY environment variable to :0.0? If not, that's what you didn't do right. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display
[EMAIL PROTECTED] wrote: Hi, i got this error when i run wireshark, can anyone point out what i'm not doing right, Thanks. Platform:mac osx 10.4 installed wireshark thru macport Have you installed X11? If not, that's what you didn't do right. If you have installed X11, is X11 running? If not, that's what you didn't do right. If X11 is running, have you set the DISPLAY environment variable to :0.0? If not, that's what you didn't do right. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display
Hello, I had the same problem one week ago when i installed in osx 10.4 The tip is. You should all so open X11 After this it worked fine On Jul 13, 2007, at 10:01 AM, [EMAIL PROTECTED] wrote: Hi, i got this error when i run wireshark, can anyone point out what i'm not doing right, Thanks. Platform:mac osx 10.4 installed wireshark thru macport ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
thanks for the reply, Luis Ontanon said the following: Assuming your user belongs to group admin(80) you should: snip $ sudo chgrp admin /dev/bpf* $ sudo chmod g+r /dev/bpf* $ wireshark (wireshark:550): Gtk-WARNING **: cannot open display: $ this is a single user macbook on a home wireless to DSL system. -- Frobozz Mac OS/X 10.4.8 Macbook Pro 2.16 Intel Core Duo wireshark 0.99.5 X11 1.1.3 - XFree86 4.4.0 Darwin ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On 2/13/07, Robert D. [EMAIL PROTECTED] wrote: thanks for the reply, Luis Ontanon said the following: Assuming your user belongs to group admin(80) you should: snip $ sudo chgrp admin /dev/bpf* $ sudo chmod g+r /dev/bpf* $ wireshark (wireshark:550): Gtk-WARNING **: cannot open display: this is a single user macbook on a home wireless to DSL system. what does $ id yield in your case. for me it does like this: [id-est:~/src/ws/trunk] lego% id uid=501(lego) gid=501(lego) groups=501(lego), 81(appserveradm), 79(appserverusr), 80(admin) You can choose any of the groups that returns to chgrp to it. -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
Luis Ontanon said the following: what does $ id yield in your case. uid=501(rd) gid=501(rd) groups=501(rd), 81(appserveradm), 79(appserverusr), 80(admin) -- Frobozz ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On 13/02/07, Robert D. [EMAIL PROTECTED] wrote: Luis Ontanon said the following: what does $ id yield in your case. uid=501(rd) gid=501(rd) groups=501(rd), 81(appserveradm), 79(appserverusr), 80(admin) What about: echo $DISPLAY Can you start any X11 applications from the shell? -- Frobozz ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
sebb said the following: What about: echo $DISPLAY Can you start any X11 applications from the shell? not sure what applications I _could_ start from the X11 window ... I've tried, but this is my first experience with X11 actually. I noted when terminal starts that I see Last login: Tue Feb 13 11:26:36 on ttyp2 Welcome to Darwin! export': not a valid identifier export': not a valid identifier export': not a valid identifier export': not a valid identifier $ if that matters any ... ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
sebb said the following: Can you start any X11 applications from the shell? actually .. there are Terminal xman xlogo and they all do something when activated from the context menu ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On 13/02/07, Robert D. [EMAIL PROTECTED] wrote: sebb said the following: What about: echo $DISPLAY Can you start any X11 applications from the shell? not sure what applications I _could_ start from the X11 window ... I've tried, but this is my first experience with X11 actually. There's usually a clock application - try xclock. I noted when terminal starts that I see Last login: Tue Feb 13 11:26:36 on ttyp2 Welcome to Darwin! export': not a valid identifier export': not a valid identifier export': not a valid identifier export': not a valid identifier $ That's not ideal - looks like an error in a login script or profile. export is used to create environment variables, one of which could be the DISPLAY. if that matters any ... ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On 13/02/07, Robert D. [EMAIL PROTECTED] wrote: sebb said the following: Can you start any X11 applications from the shell? actually .. there are Terminal xman xlogo and they all do something when activated from the context menu That's not the same as running them from the shell. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
sebb said the following: There's usually a clock application - try xclock. yes as well as xcalc and they work fine ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
sebb said the following: ok .. by using 'get info' I chown'd from admin to rd ... and ,,, anyway .. if I double click Wireshark, x-11 opens it AND all the network points are displayed. However, once I select en1 and capture, I can no longer get internet access from mail client nor browser ... even when I kill both x-11 and wireshark ... checking 'activity monitor' reveals they are gone ... but no internet access until I re-boot the computer. but in activity mon only x-11/quartz-wm/xterm/bash and x11 shows up. Wireshark does not appear in the monitor FWIW currently no capture is running and I have access. I will, after sending this, activate a capture and lose Internet until reboot. Also, no data gets captured on en1 ... BTW, thanks a whole lot for helping, I am totally stuck on this one but really need ethereal to trace a vnc problem I am having trying to access/control my elderly mom's computer remotely ... ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
well, after the reboot, when I click wireshark, there are (again) no interfaces from which to capture .. most annoying since I seem to be occasionally able to run it in the right permission level ... checking permissions from get-info reveals they are still set at what I just changed them to. oh yeah, this is perplexing ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
Robert D. wrote: My google searching discovers this is pervasive. None the less, I can't seem to solve it on my system. If I type: sudo wireshark in Terminal (and give password) then I get: (wireshark:528): Gtk-WARNING **: cannot open display: What if you do echo $DISPLAY in Terminal? If it doesn't print: :0.0 then you need to do either DISPLAY=:0.0; export DISPLAY if you're using a Bourne-compatible shell (bash, ksh) or setenv DISPLAY :0.0 if you're using a C-shell-compatible shell (tcsh). If you do that in your .login or .profile, it'll happen automatically. If I navigate way down the tree in opt/local/var/db/dports/software/wireshark/0.99.5_0+darwin_8/opt/local/share and double click the unix executable Wireshark, then it runs but obviously hasn't the ability to find the network points. Obviously? Why? Because it's not running as root? If so, note Luis Ontanon's comment. The libpcap source tree has an OS X startup item that sets the permissions on the BPF devices for you, so you don't have to do it after every rebooth; I've attached it (it's a bzipped tarball; extract it into /System/Library/StartupItems, so that there's a ChmodBPF directory under /System/Library/StartupItems). One time, shortly after re-installing X-11 this morning, I was able to do a sudo wireshark and have it run corectly AND locate the various network points. When I discovered that none of my running programs could get to the Internet anymore, I suspected Wireshark had intercepted the en1 path No, it doesn't intercept the en1 path. However, on some Intel-processor notebooks, with the standard libpcap, Wireshark will end up opening the monitor mode version of en1, which causes it to de-associate from whatever network you're associated with. I think Andreas Fink's Wireshark package for OS X: http://www.finkconsulting.com/page7.php is built with a version of libpcap that avoids this. (The Fink and DarwinPorts packages, as far as I know, are built with the standard libpcap in OS X.) ChmodBPF.tar.bz2 Description: Binary data ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
Guy Harris said the following: so that there's a ChmodBPF directory under /System/Library/StartupItems). done ... verified it's that way .. contains chmodbpf a plist and a cvs folder ,,, restart .. run wireshark and same issue, no capture devices I think Andreas Fink's Wireshark package for OS X: http://www.finkconsulting.com/page7.php currently downloading that one now ... ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
Robert D. wrote: Guy Harris said the following: so that there's a ChmodBPF directory under /System/Library/StartupItems). done ... verified it's that way .. contains chmodbpf a plist and a cvs folder ,,, restart .. run wireshark and same issue, no capture devices What does ls -l /dev/bpf* in a Terminal window print? What happens if you do tcpdump -i en0 ? ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
Guy Harris said the following: What does ls -l /dev/bpf* in a Terminal window print? Zork:~ rd$ ls -l /dev/bpf* crw-r--r-- 1 root wheel 23, 0 Feb 13 15:57 /dev/bpf0 crw-r--r-- 1 root wheel 23, 1 Feb 13 15:57 /dev/bpf1 crw-r--r-- 1 root wheel 23, 2 Feb 13 15:57 /dev/bpf2 crw-r--r-- 1 root wheel 23, 3 Feb 13 15:57 /dev/bpf3 What happens if you do tcpdump -i en0 Zork:~ rd$ tcpdump -i en0 tcpdump: WARNING: en0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on en0, link-type EN10MB (Ethernet), capture size 96 bytes Zork:~ rd$ tcpdump -i en1 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on en1, link-type EN10MB (Ethernet), capture size 96 bytes and a whole lot of traffic, DNS lookups, and general Internet packets that I am looking for. ctrl-C stopped them. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On Feb 13, 2007, at 1:06 PM, Robert D. wrote: ok .. regarding andreas' version ... I see it in usr/local/bin .. it runs with X11 .. detects en0 en1 wit1 Io0 en1 shows packets when I view it from 'capture interfaces' Does the Capture Interfaces window also show wlt1? If so, do *NOT* use Capture Interfaces, as it's opening the monitor mode device for your AirPort Extreme interface, which causes it to disassociate from the wireless network you're associated with. Use Capture-Options instead. the IP is actually a mac address, it seems .. No, it's probably an IPv6 address. If it looks like fe80:5: etc., that's an IPv6 address. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
Re: [Wireshark-users] Gtk-WARNING **: cannot open display:
On 13/02/07, Robert D. [EMAIL PROTECTED] wrote: sebb said the following: Can you start any X11 applications from the shell? actually .. there are Terminal xman xlogo and they all do something when activated from the context menu That's not the same as running them from the shell. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
