topic Re: Can't get Ethereal to work.... in Operating System - HP-UX

Can't get Ethereal to work....

Rita C Workman — Thu, 11 Oct 2001 15:05:48 GMT

I am trying to get this to run..and so far I must admit failure..I have two areas I could use some info on:
First !
Got message "Can't find PPA for /dev/lan_ ..." I have tried for the lan I know the system has...same message.
I have tried:
1. Creating a symbolic link:
ln -s /dev/dlpio /dev/lan0
2. Creating a device for this:
mknod /dev/lan1 c 173 0x000000
major #173 is what shows in my lsdev for btlan1

Neither of the above worked.....
Anybody know some sure fire way to make this work. Trying it on K570 running 10.2. And yes the gui and everything comes up fine...it just won't capture anything.

Second !
Possibly need to set card promiscuous...so my last question is this:
I found this info on setting up card for promiscuous...is it accurate?
"To trace the outbound packets, please do the following to turn on a global promiscuous switch before running the promiscuous applications like snoop or tcpdump:
adb -w /stand/vmunix /dev/mem lanc_outbound_promisc_flag/W 1
(adb will echo the result showing that the flag has been changed)
$quit

Thanks,
Rita

Re: Can't get Ethereal to work....

Rita C Workman — Fri, 12 Oct 2001 14:08:21 GMT

Pushing this back to the top...

Come on...one of you brave brilliant folks out there...any suggestions ??

Rita

Re: Can't get Ethereal to work....

A. Clay Stephenson — Fri, 12 Oct 2001 14:09:03 GMT

Hi Rita:

You're going to hate this. I just loaded it
on my 11.11 sandbox using the 11.0 binaries and it worked the first time and I was able to capture data. I don't have an old 10.20 sandbox to try it on.

You must have the following from GNU as well:

gettext
glib
gtk+
libiconv
licpcap
smnp
zlib

Clay

Re: Can't get Ethereal to work....

Steve Bonds — Mon, 15 Oct 2001 16:03:22 GMT

I've had the same problem with the network mapping utility "nmap". So far I don't have any solution, but if I come up with something I'll post it here.

It seems to be a popular problem, but one without a popular solution. :-(

http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0xd96287dc4d7dd5118ff00090279cd0f9,00.html

I also have multiple NICs on my system, but it sounds like you're having problems with good ol' lan0.

I've installed ethereal on all my systems without any problems. What's especially strange is that ethereal works on the same system where nmap fails. It seems like pcap_open_live() should fail on both or neither.

Re: Can't get Ethereal to work....

Sachin Patel — Mon, 15 Oct 2001 16:56:27 GMT

Hi Rita,
We have exact same problem (Could not find PPA ????) couple week ago on N-4000. I will try to locate call-log.

Sachin

Re: Can't get Ethereal to work....

Sachin Patel — Mon, 15 Oct 2001 17:06:43 GMT

Re: Can't get Ethereal to work....

Steve Bonds — Mon, 15 Oct 2001 17:18:05 GMT

That looks like a different issue. My LAN cards all show up fine in lanscan. The minor numbers do seem to not match (and this may still be the issue), but nmap gets upset at me when I try to use a newly created device with the minor numbers I thought would work. (Device not found errors.)

Perhaps ethereal deals with this better, but I think Rita mentioned that was already tried...

Re: Can't get Ethereal to work....

Rita C Workman — Mon, 15 Oct 2001 17:25:38 GMT

Hey Clay,

Didn't have gettext and libiconv...so loaded it up !
...and so far I am still shootin blanks....Wish I had a 11.11 box to try on. I've set this up on a PC to sniff that network and it worked slicker'n anything...but not on HPUX.

Even tried doing the adb command...nothing.

So I'm a gonna wait and see if you find that call ticket and had a resolution before I give some points here....

Thanks,
Rita

Re: Can't get Ethereal to work....

Lou Zirko_1 — Mon, 15 Oct 2001 18:13:03 GMT

The libpcap package has had a lot of issues with HP networking devices. The most current version seems to have a lot of the issues ironed out though. Of particular interest to you will be one of the item in the changelog for version 0.6 version (current release 0.6.2).

Fixed HP-UX libpcap implementation to correctly get the PPA for an interface, to allow interfaces to be opened by interface name.

You may want to look at an updated version of libpcap. You did not mention what version you were using.

Lou Zirko

Re: Can't get Ethereal to work....

Steve Bonds — Mon, 15 Oct 2001 18:21:32 GMT

I'm using version 3.6.2 from the HP-UX porting center and see this problem.

If only HP's raw interface API weren't so extraterrestrial libpcap would work a lot better. ;-)

Re: Can't get Ethereal to work....

Sridhar Bhaskarla — Mon, 15 Oct 2001 18:37:26 GMT

Rita,

It should work straight with glib, gtk, libpcap, snmp,zlib and gettext softwares. Try the following.

1. Get all the softwares into a single depot including ethereal. Call it nettools.
2. Install everything under nettools with
taking out "reinforcing dependency errors".
3. You don't need to create any device files. Ethereal will pick up the device files from /dev/ directory as /dev/lan*.

***Did you try running ethereal as root***??

-Sri

Re: Can't get Ethereal to work....

Patrick Wallek — Mon, 15 Oct 2001 18:41:11 GMT

Hey Rita,

I've had the same luck as Clay. I gathered everything together, and put it into it's own depot, and installed it all at once and ethereal came up like a champ.

I know you said you're on 10.20, but I've got all the 11.00 stuff in the depot if you're interested.

You know where to find me! :)

Re: Can't get Ethereal to work....

Rita C Workman — Mon, 15 Oct 2001 18:56:36 GMT

Zippy-ta-dooo-daaaah !

It works...got it going on 10.2 and 11.0.

Hot diggity !!

It was a combination of what Clay said needed to be loaded that I had missed...and than loading the latest version of libpcap (6.2)...and woosh....I be sniffin big time...oohhh baby....I am too happy !!

Thank you all and especially Clay & Lou !!!
Rita

Re: Can't get Ethereal to work....

Scott E Smith — Wed, 20 Mar 2002 18:06:14 GMT

Patrick and or Rita, can you post or send me the depot you created that has all the 11.0 stuff in it? Thanks.