FS#9201 - wireshark crashes, possibly due to problems with libcap

Attached to Project: Arch Linux
Opened by robin wood (dninja) - Sunday, 13 January 2008, 21:27 GMT
Last edited by Thomas Bächler (brain0) - Sunday, 13 January 2008, 21:54 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Thomas Bächler (brain0)
Architecture All
Severity High
Priority Normal
Reported Version 2007.08-2
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
When I start wireshark any attempt to capture packets results in the gui freezing and this being dumped to the console:

capset(): Operation not permitted
capset(): Operation not permitted
capset(): Operation not permitted
capset(): Operation not permitted
capset(): Operation not permitted
capset(): Operation not permitted
21:20:15 Warn Unknown message from dumpcap, try to show it as a string: capset(): Operation not permitted
capset(): Operation not permitted
¿0T¿

I've done some googling and found mandriva were having the same problem:

http://qa.mandriva.com/show_bug.cgi?id=36470
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:001-1

The say it is a problem with wireshark using libcap.


Additional info:
wireshark 0.99.7-1
This task depends upon

Closed by  Thomas Bächler (brain0)
Sunday, 13 January 2008, 21:54 GMT
Reason for closing:  Not a bug
Comment by Thomas Bächler (brain0) - Sunday, 13 January 2008, 21:53 GMT
wireshark now needs the 'capability' kernel module to be loaded, I am not sure why. Many other programs need it as well, include it in your MODULES array in rc.conf:

MODULES=(... capability)

Loading...