Wireshark mailing list archives
Re: Upgraded wireshark to 1.2.6 but now old pcapfiles cannot be read (MacPorts)
From: Jose Pedro Oliveira <jpo () di uminho pt>
Date: Fri, 23 Apr 2010 18:44:16 +0100
Hi, This is a follow up regarding the MacPorts Wireshark/Zlib problem. The problem appears to have been solved with the appearance of zlib 1.2.5 in MacPorts. I have just built wireshark-devel (version 1.3.4) and everything appears to be working correctly (capinfos no longer complains about invalid cap files and wireshark opens them without problems). Regards, jpo On 2010-03-25 18:55, Kok-Yong Tan wrote:
On Mar 24, 2010, at 13:31, Kok-Yong Tan wrote:
---[big snip]---
Okay, confirmed: The problem is with using zlib 1.2.4 with wireshark 1.2.6 on Tiger, Leopard and Snow Leopard. If wireshark 1.2.6 on Tiger, Leopard and Snow Leopard is rebuilt under MacPorts to use the zlib 1.2.3 libraries, all my earlier problems with opening prior capture files in wireshark as well as making new captures (not just storing new captures) just vanish. Building wireshark under MacPorts is pretty simple. Just follow this procedure: 1. Download and install the appropriate version of Xcode for your OS version from Apple's developer site; 2. Download and install the initial MacPorts 1.8.2 standard Apple installer from <http://www.macports.org>; 3. Type "sudo port selfupdate" if you want to be anal (I always am); 4. Type "sudo port install wireshark" and that's it but that gives you wireshark 1.2.6 with the zlib 1.2.4 package. To get wireshark to use the older zlib 1.2.3 package, you just have to follow the instructions here: <http://trac.macports.org/ wiki/howto/InstallingOlderPort> precisely. Then deactivate, clean and install the wireshark package again but this time do "sudo port - n install wireshark" (disregarding the man page so it doesn't go out and re-download the latest zlib 1.2.4 package. The reason for installing wireshark and then re-installing it again with the -n switch is to ensure that all other packages it depends on are the latest and greatest before backing out the zlib package from 1.2.4 to 1.2.3 to do the reinstall. Hope this helps someone out there in the same boat. --
-- José Pedro Oliveira * mailto:jpo () di uminho pt * ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Re: Upgraded wireshark to 1.2.6 but now old pcapfiles cannot be read (MacPorts) Jose Pedro Oliveira (Apr 23)