Red Hat Bugzilla – Bug 204565
Wireshark missing symlink in default install
Last modified: 2007-11-30 17:07:27 EST
Description of problem:
The default installation of Wireshark looks for dumpcap in /usr/bin. There is
no dumpcap in /usr/bin. It is found in /usr/sbin.
Version-Release number of selected component (if applicable):
100%. Removal and reinstallation of wireshark produce the same error condition.
Steps to Reproduce:
1. Install RHEL4 WS and wireshark/wireshark-gnome
2. Start wireshark.
3. Attempt to capture packets on any non-loopback network interface.
Popup window: Child capture process exited: exit status 2
Popup window: Couldn't run /usr/bin/dumpcap in child process: No such file or
Packet capture starts without error.
# ln -s /usr/sbin/dumpcap /usr/bin/dumpcap
[root@neptune ~]# uname -a
Linux neptune.domain 2.6.9-42.ELsmp #1 SMP Wed Jul 12 23:27:17 EDT 2006 i686
i686 i386 GNU/Linux
[root@neptune ~]# cat /etc/redhat-release
Red Hat Enterprise Linux WS release 4 (Nahant Update 4)
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.