我在Ubuntu上安装了wireshark,当我运行它时:
/usr/bin/wireshark我得到一个错误:
(wireshark:27945): Gtk-WARNING **: cannot open display:我想在命令提示符下运行wireshark。
我不想使用UI。我不知道为什么它会抱怨显示器,我想在一个端口上运行它。
发布于 2012-12-04 14:51:59
你可以试试wireshark tshark,它是wireshark项目的一部分,是一个基于控制台的wireshark。
您应该阅读read man tshark。
例如,要在80端口上捕获http数据包,请运行:
tshark -f 'tcp port 80 and http'附注:示例已修复为使用捕获筛选器而不是显示筛选器。
发布于 2012-12-04 14:48:03
在Ubuntu上,运行wireshark会抱怨显示:
el@apollo:~$ wireshark
(wireshark:20619): Gtk-WARNING **: cannot open display:设置DISPLAY环境变量:
export DISPLAY=:0.0
/usr/bin/wireshark然后它就能工作了:
el@apollo:~$ wireshark -Y
wireshark: option requires an argument -- 'Y'
Usage: wireshark [options] ... [ <infile> ]
Capture interface:
-i <interface> name or idx of interface (def: first non-loopback)
-f <capture filter> packet filter in libpcap filter syntax
-s <snaplen> packet snapshot length (def: 65535)
-p don't capture in promiscuous mode
-k start capturing immediately (def: do nothing)
-S update packet display when new packets are captured
-l turn on automatic scrolling while -S is in use
-I capture in monitor mode, if available
-B <buffer size> size of kernel buffer (def: 2MB)
-y <link type> link layer type (def: first appropriate)
-D print list of interfaces and exit
-L print list of link-layer types of iface and exitwireshark是一个X应用程序,因此它需要知道将X11显示输出发送到何处。
https://stackoverflow.com/questions/13697397
复制相似问题