Arch Linux

dffdfddfdf

Member

Registered: 2013-12-19

Posts: 1

Wireshark and tcpdump does not detect my network interfaces anymore

Hello,

Since a few days or weeks, wireshark and tcpdump does not detect my network interfaces anymore (eth0 and wlan0).

My network interfaces:

$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:57:a4:5d:75:58 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.34/24 brd 192.168.1.255 scope global eth0
    inet6 2a00:5e80:505:4257:257:a4ff:fe5d:7258/64 scope global dynamic 
       valid_lft 604492sec preferred_lft 604492sec
    inet6 fe80::257:a4ff:fe5d:7258/64 scope link 
       valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 00:85:7d:96:d5:ef brd ff:ff:ff:ff:ff:ff

Interfaces detected by wireshark and tcpdump:

$ sudo tcpdump -D
1.nflog (Linux netfilter log (NFLOG) interface)
2.nfqueue (Linux netfilter queue (NFQUEUE) interface)
3.dbus-system (D-Bus system bus)
4.dbus-session (D-Bus session bus)

Any idea?

Thanks in advance.

hoelzro

Member

Registered: 2007-01-14

Posts: 8

Re: Wireshark and tcpdump does not detect my network interfaces anymore

Hi there,

I had the same problem; a cursory look at strace tcpdump -D output involved a lot of scanning of /sys.  I'm guessing that something in sysfs has changed recently, but I haven't investigated further.  I *did* manage to fix the problem by downgrading to libpcap 1.4, though.

kokoko3k

Member

Registered: 2008-11-14

Posts: 2,427

Re: Wireshark and tcpdump does not detect my network interfaces anymore

I don't know if it is related, but ngrep stopped working too.

---

Help me to improve ssh-rdp !
Retroarch User? Try my koko-aio shader !

twix

Member

Registered: 2010-10-07

Posts: 63

Re: Wireshark and tcpdump does not detect my network interfaces anymore

I reinstalled Wireshark, did and it now seems to work, don't know what it changed ?

Just verify that your user belongs to the wireshark group too.