Thank you Guy Yes you are correct, sudo tcpdump does also drop the connection on en1 as it starts capturing on en0, weird Tshark version is the current MacPorts - TShark 0.99.3a
Just rebuilding svn so I can grab a source... ;-) (its a very new laptop) Mike On Oct 30, 2006, at 1:23 AM, Guy Harris wrote: > Mike Savory wrote: >> Details below were just to show that the build on my Laptop is using >> libpcap 0.9.4 my PPC laptop uses 0.8.3 >> >> I can capture packets and remain attached to my wireless running >> perfectly >> >> sudo tcpdunp -i en1 >> >> When I run >> >> sudo tshark -i en1 >> >> It immediately drops the wireless. > > What if you run > > sudo tcpdump > > without a "-i" argument? It will probably drop the wireless > connection, > so the problem isn't purely a Wireshark problem. > > And what version of TShark are you running? What does "tshark -V" > print? A version I have built from recent SVN source doesn't open > wlt1 > if you run it with "-i en1", so that version shouldn't cause the > connection to be dropped. > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users