Tuesday, August 02, 2005
Getting Ethereal Working On Mac OS X
Categories: Technology
***Update***
After making a short entry on Ethereal I’ve received a lot of hits from people searching for information on Ethereal and OS X. With this in mind (and because of a request in the comments) I will do my best to describe the steps necessary to get Ethereal compiled and working in OS X.
I want to quickly note that very little of what will follow is the result of my own personal ingenuity. I spent a lot of time reading other people’s attempts and combined that knowledge into a solution that should work for everyone (I’ve tried it on no less than 3 different systems).
While I will do my best to be clear about the steps that need to be taken, I will be assuming at least a passing knowledge of navigating UNIX directories, using the PICO text editor, and entering commands into the Terminal application.
Step 1
The first thing you will need to do is get Apple's X11 environment on your system. If you are in Panther (10.3) you can go here to download it from Apple. If you are in Tiger (10.4) you will need to install it off of your Tiger install disc.
There is nothing special you will need to do regarding the X11 install; just run Apple's installer and you are done.
Step 2
To compile Ethereal you will need to have Apple's Developer Tools installed on your system. These came with your system install disks but were not installed by default. You can also download the latest versions of them from Apple if you register for an account at Apple's Developer Connection Page.
I recommend going through the trouble of getting an account and downloading whatever the latest version of the Developer Tools is. It is free and Apple does make changes and improvements to the tools as time progresses.
Installing the Developer Tools is simply a matter of running the installer.
Step 3
Go to the Fink Download Page and download the correct version for your OS. At the time I am writing this Version 0.8.0 is the latest version for Tiger and Version 0.7.2 is the latest version for Panther.
Again there is nothing special you need to do other than run the installer.
Step 4
If the Fink installer reports that it had trouble adding the binary path to your shell preferences (this occurred on two of the three systems I compiled Ethereal on) you will need to add the binary path yourself.
Open up a new Terminal window and type:
sudo pico -w .profile
Press Return type in your password (the same one you type in when installing software) press Return again and you will have opened up your shell preferences file in the PICO text editor. Now you need to add two lines to the preferences file:
PATH=$PATH:/sw/bin
source /sw/bin/init.sh
Once you have added the lines type Control-X, then Y, then press Return to save the changes.
Now you are ready to run configure Fink. Close your current Terminal window and open a new one (this will reload the preferences file you just edited) and type the following into your new Terminal window:
fink configure
Press Return, enter you password and press Return again. Press Return until you get to the line that says:
Should Fink try to download pre-compiled packages from the binary distribution if available?
Type N and press Return. Press until you get to the line that says this:
Proxy/Firewall settings:
Enter the URL of the HTTP proxy to use, or 'none' for no proxy.
The URL should start with http:// and may contain username, password or port specifications.
E.g: http://username:password@hostname:port
If you have proxy server between you and the internet (most larger businesses have something like this) you will need to enter your proxy information here. Because each proxy server is a little different I can't tell you what to type in. You will need to get this information from your system admin (You can also try looking in the Network panel in System Preferences under the Proxies tab). If you are at home on your personal internet connection then chances are you don't need to do anything here.
When you are done entering your proxy settings press Return. If you had to edit the proxy preferences in the previous step you may need to type Y and press Return on this line so that FTP connections go through the proxy as well.
Now it is time to actually Compile Ethereal. Thankfully Fink does all of the hard work. All you need to do is type the following into the Terminal window:
fink install ethereal
Press Return type your password and press Return again. At this point Fink will list Ethereal's dependencies that will need to be installed as well. Fink will then ask if you want to continue. Press Return and Fink will start downloading the files it needs. Once it is down downloading it will start compiling and installing the binaries and libraries that Ethereal requires (it installs Ethereal as well once all of Ethereal's requirements have been met).
Depending on the speed of your internet connection and the speed of your computer this portion can take some time (it took about 15 minutes on a G5 and probably half a day on an older G4). You may want to browse the web (isn't a true multitasking system great?) or go do something outside while you wait.
Step 5
After Fink is done you should be almost ready to run Ethereal for the first time.
Go to your Applications folder, open the Utilities folder and launch the X11 application. Once it has launched you should see a Terminal window titled xterm. This is where you will launch Ethereal from. But first you need to type the following into the Terminal window:
sudo fc-cache
Press Return type your password and press Return again. This creates font caches that Ethereal needs. This only needs to be done once.
Once the font cache has been created type the following into the X11 Terminal window:
sudo /sw/bin/ethereal
Press Return type your password and press Return again. Ethereal should now launch. I'll let you try to figure out how to actually use it on your own (there are plenty of tutorials already).
If you would like to automate the launching process I highly recommend using Martin Fuhrer's XDroplets. And of course if you would like your Ethereal launcher to have a nice icon I have this one I made just for that purpose.
I would love to hear in the comments if this was helpful to you.
Posted by Jamie at 07:59 PM
comments
you are my hero. :) anyone who can post all this wonderful information is a gem. :)
i totally agree with you on the harry potter books… not deep, yet fun. :)
thanks for the comments.
Posted by Joshua on August 04, 2005 at 08:50 AM
>you are my hero. :) anyone who can post all this wonderful information is a gem. :)
The one person who thanks me has no use for packet sniffer. Sigh… :)
>i totally agree with you on the harry potter books… not deep, yet fun. :)
Yes, I was having a conversation with someone the other day who vehemently disagreed with me on that. But this person hadn’t ever read anything I used as an example of a deep book so the conversation didn’t get very far. :)
>thanks for the comments.
Of course. On another note I think I ended almost every paragraph with a smiley. I’ve got to wean myself off of those.
Posted by Jamie on August 04, 2005 at 04:13 PM
Hey, Great Post.
Just curious to know what type of devices you use to capture packets and if you use a wireless card which type given the limited use of an airport extreme card.
Posted by Neil on August 08, 2005 at 02:11 PM
Neil,
In the lab at work we simply use the built in ethernet cards. We don’t do testing with wireless products and so have no use for that functionality.
On my PowerBook at home I do use a wireless network and haven’t noticed any issues with my Airport Extreme card and Ethereal. The card shows up as a another device in the device list and I simply select it or the ethernet card and both seem to be functionally equivalent as far as Ethereal is concerned.
Have you had specific issues with your card before?
Posted by Jamie on August 08, 2005 at 03:48 PM
For the love of God man! I have been searching for a good sniffing solution for my Mac without actually having to go out and buy Etherpeek as if I were searching for the Holy Grail! You too are MY HERO! Long live my Powerbook! Long live Jamie! Hip hip, HORRAY!
Posted by Mark on August 24, 2005 at 10:21 AM
Glad it was useful to you. Its always nice when people let me know. I’ve been getting roughly half of my traffic because of people searching for this but only three people have actually said something. :)
We use Etherpeek here at work as well. Its a good piece of software (though expensive). The main reason we are using Ethereal now is because Etherpeek’s developers told us they were no longer actively developing the product. It works fine now on OS X but there is nothing to say that the next update won’t break it.
Posted by Jamie on August 24, 2005 at 01:36 PM
I just followed yoru instructions, but I got some error output. Here it is…
(ethereal:16507): GdkPixbuf-WARNING **: Can not open pixbuf loader module file ‘
/sw/etc/gtk-2.0/gdk-pixbuf.loaders’: No such file or directory
(ethereal:16507): GdkPixbuf-WARNING **: Error loading XPM image loader: Image ty
pe ‘xpm’ is not supported
(ethereal:16507): Gdk-CRITICAL **: file gdkpixbuf-render.c: line 293 (gdk_pixbuf
_render_pixmap_and_mask_for_colormap): assertion `GDK_IS_PIXBUF (pixbuf)’ failed
** (ethereal:16507): WARNING **: No builtin or dynamically loaded modules
were found. Pango will not work correctly. This probably means
there was an error in the creation of:
‘/sw/etc/pango/pango.modules’
You may be able to recreate this file by running pango-querymodules.
(ethereal:16507): GLib-GObject-CRITICAL **: file gobject.c: line 1561 (g_object_
ref): assertion `G_IS_OBJECT (object)’ failed
** (ethereal:16507): CRITICAL **: file pango-engine.c: line 68 (_pango_engine_sh
ape_shape): assertion `PANGO_IS_FONT (font)’ failed
** ERROR **: file shape.c: line 75 (pango_shape): assertion failed: (glyphs->num
_glyphs > 0)
aborting…
Abort trap
Thanks for the great instructions.
(I now have both Darwin Ports and Fink installed.)
Posted by Kale Severin on September 21, 2005 at 07:46 PM
Kale that looks like the error that happens when the font caches haven’t been created. That is what this command is supposed to do:
sudo fc-cache
I’m assuming it compiled and you are getting those errors when you try to launch the application?
As for Darwin Ports and Fink I’ve had no luck with the version of ethereal on Darwin Ports. The Fink one is the only one I have ever had success with.
Posted by Jamie on September 21, 2005 at 09:14 PM
Well, my mistake, haven’t compiled yet. (as you can obviously tell I am very new to this) Well I open the ethereal unix exec in xcode, but how do I compile it? I have no idea here. I guess that last part i finished successfuly was terminal install. I also made the cache in the X11 terminal. Now I just need to compuile i guess. Also when I compile where should the compiled file go? /sw/bin/ ? Thanks for the help this was definatly the best howto I came across.
Posted by Kale on September 21, 2005 at 10:26 PM
Running this command:
fink install ethereal
Should compile the application if you made sure to do the setup and turn off pre-compiled binaries using the configure command:
fink configure
So ethereal should already be there in the /sw/bin/ directory. Also you need to start ethereal from the X11 terminal it won’t start from the normal one.
Sorry I’m not more help. I’m trying. :)
Posted by Jamie on September 21, 2005 at 10:39 PM
Well maybe that was my mistake, i had pre-compiled binaries turned on. I am installing agian(after i removed of course), and hopefully it will work this time.
Thank you agian for the help.
Posted by Kale on September 22, 2005 at 12:13 AM
I should really make that more clear I suppose. It is noted in the instructions but it comes after stuff that you only have to do if the installer messes up which is misleading.
Posted by Jamie on September 22, 2005 at 12:25 AM
Well it is compiling now. I am going to bed, i will check in the morning before school. I have one question, should i leave precompiled binaries off?
Posted by Kale on September 22, 2005 at 01:22 AM
I got it! It’s running now. Thank you for all the help. :)
Posted by Kale on September 22, 2005 at 08:38 AM
Great. :)
Posted by Jamie on September 22, 2005 at 10:00 AM
You are the man! Thank you so much for putting out a tutorial that is dumbed-down enough w/out the “I’m so smart....figure it out for yourself” attitude from a lot of UNIX/LINUX/MAC OS X gurus. You are permanently bookmarked. Thanks again!
Posted by Erik Edwards on September 22, 2005 at 02:37 PM
Glad I was able to be a help.
Posted by Jamie on September 25, 2005 at 11:28 AM
Dou you know how to install ettercap on os 10.3.9??? thanks
Posted by Karl on September 27, 2005 at 08:57 PM
The version installed by Darwin Ports seems to work fine. It isn’t nearly as easy to use as ethereal though and it does not work using the GUI though it has a somewhat comprehendible menu system in the command line client.
Posted by Jamie on September 27, 2005 at 09:23 PM
Hey, i am back. I haven’t really used ethereal since I installed it. But what i try to start a capture, i get the error message…
The capture session could not be initiated ((no devices found) /dev/bpf0: Permission denied).
Please check to make sure you have sufficient permissions, and that
you have the proper interface or pipe specified.
I have only done the steps in this tutorial, what am i missing?
Thanks for the help
Posted by Kale Severin on October 05, 2005 at 09:40 PM
Ok, i got it. I was useing Xdroplets. I just made it launch with admin privilages
Posted by Kale Severin on October 05, 2005 at 09:45 PM
Yes. Using that option is the same as putting sudo before ethereal when launching from the Terminal.
Posted by Jamie on October 05, 2005 at 10:15 PM
Howto decrypt passw????
Posted by Karl on October 06, 2005 at 11:04 AM
What password are you talking about?
Posted by Jamie on October 06, 2005 at 12:03 PM
just wanted to say you are the man. i been trying for months to get ethereal up. always had some kind of error but thank to you im up & runnin. :)
Posted by roy on October 21, 2005 at 02:07 PM
Thanks for posting the info, it was very helpful.
Posted by Nick on October 31, 2005 at 10:42 PM
So I followed the whole process, with just a few little hitches (needed to reinstall X11 on a Tiger upgrade. Then I go to run Ethereal, and I get a pile of errors. I’m posting them, but I don’t expect anyone to decifer (just FYI):
(ethereal:3574): GdkPixbuf-WARNING **: Can not open pixbuf loader module file ‘/
sw/etc/gtk-2.0/gdk-pixbuf.loaders’: No such file or directory
(ethereal:3574): GdkPixbuf-WARNING **: Error loading XPM image loader: Image typ
e ‘xpm’ is not supported
(ethereal:3574): Gdk-CRITICAL **: file gdkpixbuf-render.c: line 293 (gdk_pixbuf_
render_pixmap_and_mask_for_colormap): assertion `GDK_IS_PIXBUF (pixbuf)’ failed
** (ethereal:3574): WARNING **: No builtin or dynamically loaded modules
were found. Pango will not work correctly. This probably means
there was an error in the creation of:
‘/sw/etc/pango/pango.modules’
You may be able to recreate this file by running pango-querymodules.
(ethereal:3574): GLib-GObject-CRITICAL **: file gobject.c: line 1561 (g_object_r
ef): assertion `G_IS_OBJECT (object)’ failed
** (ethereal:3574): CRITICAL **: file pango-engine.c: line 68 (_pango_engine_sha
pe_shape): assertion `PANGO_IS_FONT (font)’ failed
** ERROR **: file shape.c: line 75 (pango_shape): assertion failed: (glyphs->num
_glyphs > 0)
aborting…
Abort trap
OUCH!
Posted by Michael on November 07, 2005 at 01:08 AM
Michael, that error is exactly the same as the one Kale had above in the comments. I believe in his case he had forgotten to force fink to compile the application by setting the configuration as described in the steps. The precompiled version that Fink uses otherwise does not seem to work so forcing it to compile for your system is necessary.
Posted by Jamie on November 07, 2005 at 01:27 AM
Apologies for not reviewing the comments a little closer! I re-configured fink with the pre-compile switch at no, and now the packages are compiling in all their extended glory. I suspect it will now work (much the same fate Kale had indeed).
Thanks again!
Posted by Michael on November 07, 2005 at 11:16 AM
We have ignition. Thanks again, Jamie.
Posted by Michael on November 07, 2005 at 12:46 PM
Hi, thanks for this great guide, I’m running into a slight problem though. When installing Ethereal with Fink in the terminal, I get this message:
Failed: This package must be compiled with GCC 4.0.0, but you currently have
GCC 4.0.1 selected. To correct this problem, run the command:
sudo gcc_select 4.0
When I run the command, I get
“You are already using gcc version 4.0 as the default compiler.”
If I say “sudo gcc_select 4.0.0”, it says:
The following is missing from your gcc 4.0.0 compiler installation.
Reinstall the 4.0.0 compiler, or use another release.
/usr/bin/gcc-4.0.0
/usr/bin/g++-4.0.0
/usr/include/gcc/darwin/4.0.0/stdint.h
/usr/include/gcc/darwin/4.0.0/
Please let me know what you think. Thanks!
Posted by Ben on November 21, 2005 at 06:54 PM
Ben type just gcc in the terminal and hit return and tell me what it says back.
Posted by Jamie on November 21, 2005 at 09:46 PM
It says:
powerpc-apple-darwin8-gcc-4.0.1: no input files
Posted by Ben on November 22, 2005 at 11:28 AM
Well, I almost made it through. I’ve ran into some errors when trying to install ethereal with fink. Maybe you could help me out and save me some time?
I installed X11 a couple weeks back, running 10.4, downloaded the Developer Tools tonight (the latest ones are from 2002?), and installed and configured fink. Thanks in advance for any insight on this.
andys-ibook-g4:~ Andy$ fink install ethereal
/usr/libexec/gcc/darwin/ppc/3.3/cc1plus is not executable!
Information about 1762 packages read in 4 seconds.
Failed: Can’t resolve dependency “x11-dev” for package “pango1-xft2-1.6.0-1” (no matching packages/versions found)
andys-ibook-g4:~ Andy$
Posted by Andy Atkinson on November 22, 2005 at 11:48 PM
Ben, I checked my version to see what I am using and I have the same version. I suggest trying to update fink and then retrying the install. You can do that by running this command:
fink selfupdate
Andy I suggest doing the same thing as Ben above. And then restarting.
I’m flying somewhat blind here of course since I can’t actually check your guy’s computers to see what is really going on. :)
Posted by Jamie on November 22, 2005 at 11:59 PM
I needed to install Ethereal on OS X for a while and could not get a step by step instruction on how it was done. Your Instructions were flawless.
A big thank you.
Posted by Tony S on November 23, 2005 at 05:49 PM
First, I want to say thank you for posting this! I needed to install this on my Mac for an online class and couldn’t find anything out there plus I really, really, really didn’t want to work on DHs PC. BUT (there had to be one), I followed every step and everything went smoothly until I entered the last command:
sudo /sw/bin/ethereal
I get “command not found”
Any thoughts?
Posted by Dina on November 30, 2005 at 07:27 AM
Dina,
Sounds like it didn’t install into that folder for some reason…
Try going to the terminal (the normal one not the x11 one) and type:
which ethereal
The press return and tell me what it says back.
Posted by Jamie on November 30, 2005 at 10:00 PM
Jamie,
I deleted all X11/Fink-related files, reinstalled them, and followed your instructions again … STEP 5 did cause a problem … since xterm was up while installing ethereal, I thought I had to quit the X11 program before moving on to STEP 5, but I got the “unsaved riot act” bit. Instead, I opened a new xterm window and continued with STEP 5 … aaaaah … even DD clapped with Momma … I doubt that slight deviation made a difference. Could I have continued with STEP 5 in the same xterm window that I used to install ethereal? I don’t know … all that matters is IT WORKS.
Thank you!
Consider yourself *kissed* ;)
Posted by Dina on December 01, 2005 at 06:55 AM
Glad it worked out. I haven’t been kissed in awhile. :)
Posted by Jamie on December 01, 2005 at 11:20 AM
Jamie:
Yeah, you pretty much rock. I didn’t need your ethereal instructions but I do like the layout of your site and see that this page has turned you into an accidental consultant. Good luck with that.
You should consider having a PayPal link somewhere.
All best,
msq
Posted by mistersquid on December 11, 2005 at 09:52 AM
Thanks a lot for your advice!! I wouldn’t have been able to install Ethereal on my mac without you… Your my mentor.
Special congratulations for the design of your website: I love it!!!!!
Muchos besos
(:*
Posted by Piero on December 11, 2005 at 12:33 PM
I’ve always been against having anything like a PayPal link on the site. However, maybe the money would change my mind. No plans to be a proffessional constultant though. :)
Thanks a lot for your comments on the site. I’m quite happy with it myself.
It is funny how this one post now receives probably half of my monthly traffic. :)
Jamie
Posted by Jamie on December 11, 2005 at 01:16 PM
Thanks for these instructions I found a note on another website about why the binary packages for Ethereal are broken.
All you need to do after a installing the binaries for Ethereal is to install gtk+2, as it is a missing dependency:
sudo apt-get install gtk+2
See here:
http://wiki.opendarwin.org/index.php/Fink:Package_issues
That might make things a little quicker for people.
cheers,
Karl
Posted by Karl on January 06, 2006 at 04:04 PM
I was able to get Ethereal properly installed just fine, but I couldn’t seem to get it to show the devices, therefore, I couldn’t actually use Ethereal. Is there something I need to do to populate the devices list, or what could I just manually type in to capture from my wireless card (or wired ethernet)? Please email me at . Thanks.
Posted by shazbotus on January 08, 2006 at 02:08 PM
Karl,
Thanks for the info. I need to make a note that people should read the comments since there is now so much good info in them.
Shazbotus,
It sounds like you are running it without Admin privileges. Make sure you are using the sudo command:
sudo ethereal
or else if you are using xdroplets then make sure you check the Admin Privileges checkbox when making your droplet.
Posted by Jamie on January 08, 2006 at 02:24 PM
Also, Mac OS X Panther and Tiger users might use the tcpdump command in a Terminal.app window.
The command that would give similar results to the basic ethereal output (discussed above), is:
sudo tcpdump -q
You might run ethereal in your X11 window (xterm window) while also running tcpdump in a Terminal.app window, and then compare the output, line by line.
Also, there is the set of network monitoring tools within Interarchy (http://www.interarchy.com/main/features).
Example of a more detailed tcpdump command:
To check your inbound e-mail:
sudo tcpdump -Aqt -c 100 -s0 -i en0 port 110 > /dump110.txt
... that command will give you basic packet data information ... and it will dump that info into a text file named “dump110.txt” (no quotes) in your root directory (which is typically the boot volume hard disk drive icon - double-click on it to see all items at the same [root] level as the System folder).
That tcpdump command, will give you results with network namess. To change the results, so you get network numbers (IP addresses) change the -Aqt to -Anqt
The TCP port number over which you recieve your e-mails, is port 110, which explains the port 110 usage in the tcpdump command, detailed above.
Posted by Mike on January 10, 2006 at 01:03 AM
Thanks from a Sixpence fan/musician/Belmont grad/Mac admin!!!
Funny world eh?
Posted by Chris on January 12, 2006 at 02:34 PM
Thanks for the good tutorial on how to use fink and install ethereal have used it on a linux box for a long time and look forward to using it just on the mac.
thanks again
Posted by chuck allison on February 02, 2006 at 07:53 AM
I tried installing Ethereal on my Mac Mini using the steps above. First of all, thank you very much for writing this procedure. I couldn’t find any other all-in-one guide in my searches.
I’m running 10.3.9, installed Xcode Legacy Tools from the Apple Developer site, and installed Fink 0.7.2. I get this message:
$ fink install ethereal
/usr/libexec/gcc/darwin/ppc/3.3/cc1plus is not executable!
Information about 2301 packages read in 1 seconds.
Failed: Can’t resolve dependency “gcc3.3” for package “pango1-xft2-1.6.0-1” (no matching packages/versions found)
At the Apple Developer Connection site they don’t mention a package with gcc 3.3 for Mac OSX 10.3. Any suggestions? Thanks so much!
Posted by Umair Hoodbhoy on February 02, 2006 at 12:30 PM
i tried installing fink but after i ran fink install ethereal it told me that i am running gcc 4.0.1 and it needs 4.0.0. it told me to do sudo gcc_select 4.0. i did that and it told me to download the latest version from developer tools. i also did sudo gcc_select 4.0.0 and it gave me the same message. i am stuck now and i dont know what to do
please help
Posted by dor Kelman on March 07, 2006 at 02:50 AM
dor,
Try running:
fink selfupdate
in the terminal. Then try installing and see if that fixes the issue. It looks to me like fink is just looking for 4.0 and doesn’t realize that 4.0.1 is ok as well. Something that has probably been fixed in the latest version of fink.
Posted by Jamie on March 07, 2006 at 03:59 PM
Here’s a question:
I often like to use Ethereal to analyze friends network connections and with Windows and Linux then I can just download binary packages, save it on a CD from which I can install Ethereal. However, with Macintosh, I haven’t been able to figure out a way to do that same thing.
The no-brainer solution to this problem is: “just download the Mac version from your freinds’ Macs”; however, therein lies the problem: usually my friends’ networks aren’t working, so they don’t have a working Internet connection.
So, here’s my question: is there any way to download the binaries for installation and save them on a CD?
Thanks for any help!
Posted by TheDave on March 13, 2006 at 08:48 PM
Jamie,
Thank you so much for this walkthrough, it worked first time (10.4.6 on a G4 Powerbook) and I wished I’d googled *before* beginning a fruitless headbanging session trying to get either the Fink or Darwin ports to run!
Incidentally, and I’m sure you’re aware, there’s (shock horror!) another launcher app for Ethereal called AquaEthereal.
http://sourceforge.net/projects/aquaethereal/
Works for me!
Thanks again
ted
Posted by ted on April 15, 2006 at 12:53 PM
Ted,
Thanks for the info. The author of AquaEthereal actually just contacted me and his launcher will soon be using the icon I made.
TheDave,
It is possible to pull all of the files installed by Fink from the /sw/ folder. However, it is a bit of a pain (thats probably making it sound better than it is) to figure out which files are needed and which are not. I’ll leave you with that.
Posted by Jamie on April 25, 2006 at 02:51 PM
I instaled Fink, and followed the instructions on OS X 10.4.6 - and I ran into the following error :
Failed: This package must be compiled with GCC 4.0.0, but you currently have
GCC 4.0.1 selected. To correct this problem, run the command:
sudo gcc_select 4.0
I entered the above correction and the response was:
You are already using gcc version 4.0 as the default compiler.
I’m not sure what to do from here. Obviously I’m a novice… Any suggestions?
Posted by Lee on May 07, 2006 at 05:24 AM
As per a few others in the comments:
Try running:
fink selfupdate
in the terminal. Then try installing and see if that fixes the issue. It looks to me like fink is just looking for 4.0 and doesn’t realize that 4.0.1 is ok as well. Something that has probably been fixed in the latest version of fink.
Posted by Jamie on May 07, 2006 at 10:17 AM
jamie,
thank you for your clear instructions. i have followed them exactly and during the ethereal install process i have come across this error. I have uninstalled fink and started from scratch with the same result. I am runing OS X 10.4.5, xcode tools 2.1, and X11 v1.1. The fink install is 0.8.0.
Here is the error. I appreciate any help with this.
thank you
daniel
---------------
../libtool: line 1: sed: command not found
../libtool: line 1: sed: command not found
libtool: compile: unable to infer tagged configuration
libtool: compile: specify a tag with `--tag’
make[2]: *** [inp_str.lo] Error 1
make[1]: *** [all-recursive] Error 1
make: *** [all] Error 2
### execution of make failed, exit code 2
Failed: compiling gmp-4.1.3-11 failed
Posted by daniel on May 11, 2006 at 03:06 PM
hmm.. got some issues..
I’ve got XDarwin 1.4a1—I’ve got issues installing XFree86 4.3.0- ignoring for now but might be contributing to my problem.
I can run XDarwin full-screen and launch Ethereal in xwindows but cannot run it as an application in regular OSX-windows.. When I try launching via aquaethereal and via command line (sudo /sw/bin/ethereal) I just get an error in console.log - “Gtk-WARNING **: cannot open display:”
any advice is much appreciated… cheers, Larry
Posted by Larry on July 07, 2006 at 05:40 PM
Hey Larry,
The only way to get it to run is through xwindows. Apple has their own version called X11 that is different from XDarwin and it mimics the OSX windows well enough that it seems like it is running in a normal OSX window. When launched through aquaethereal it expects Apple’s X11 to be installed and I believe when launching through the terminal it is just assuming that GTK is available normally from within OSX which of course isn’t the case since OSX has its own window manager.
Posted by Jamie on July 07, 2006 at 06:29 PM
Hi Jamie!
Thank you so much for having this walkthrough! However, I’m having some problems with installing ethereal…
When I ran the “fink install ethereal” command line, everything goes fine, except for the last bit.
[ -r /sw/fink/dists/stable/main/finkinfo/base/libgettext3-shlibs.patch ]
patch -p1 < /sw/fink/dists/stable/main/finkinfo/base/libgettext3-shlibs.patch
patching file gettext-tools/lib/execute.c
patching file gettext-tools/lib/pipe.c
cd build-aux; perl -pi -e ‘s/.*chmod.*777.*$//g’ ltmain.sh
cd gettext-runtime; env EMACS=no CCACHE_DISABLE=1 ./configure --prefix=/sw --infodir=’${prefix}/share/info’ --mandir=’${prefix}/share/man’ --with-included-gettext --disable-csharp --disable-rpath ; make
checking for a BSD-compatible install… /usr/bin/install -c
checking whether build environment is sane… yes
checking for gawk… no
checking for mawk… no
checking for nawk… no
checking for awk… awk
checking whether make sets $(MAKE)… yes
checking for gcc… gcc
checking for C compiler default output file name… configure: error: C compiler cannot create executables
See `config.log’ for more details.
make: *** No targets specified and no makefile found. Stop.
### execution of cd failed, exit code 2
Removing build lock…
/sw/bin/dpkg-lockwait -r fink-buildlock-libgettext3-shlibs-0.14.5-2
(Reading database ... 4132 files and directories currently installed.)
Removing fink-buildlock-libgettext3-shlibs-0.14.5-2 ...
Failed: phase compiling: libgettext3-shlibs-0.14.5-2 failed
Seems that my C compiler cannot create executables.
So I try fink selfupdate as you have advised the other folks but I have yet another error:
If compilation produces errors, or a large number of warnings,
please read README.COMPILATION.PROBLEMS—you might be able to
adjust the flags in this Makefile to improve matters.
cc -fno-common -Wall -Winline -O -g -D_FILE_OFFSET_BITS=64 -c blocksort.c
In file included from blocksort.c:69:
bzlib_private.h:65:20: error: stdlib.h: No such file or directory
bzlib_private.h:68:19: error: stdio.h: No such file or directory
bzlib_private.h:69:19: error: ctype.h: No such file or directory
bzlib_private.h:70:20: error: string.h: No such file or directory
In file included from bzlib_private.h:73,
from blocksort.c:69:
bzlib.h:181: error: parse error before ‘FILE’
bzlib.h:209: error: parse error before ‘FILE’
blocksort.c: In function ‘fallbackSort’:
blocksort.c:277: warning: implicit declaration of function ‘fprintf’
blocksort.c:277: warning: incompatible implicit declaration of built-in function ‘fprintf’
blocksort.c:277: error: ‘stderr’ undeclared (first use in this function)
blocksort.c:277: error: (Each undeclared identifier is reported only once
blocksort.c:277: error: for each function it appears in.)
blocksort.c: In function ‘mainSort’:
blocksort.c:814: warning: incompatible implicit declaration of built-in function ‘fprintf’
blocksort.c:814: error: ‘stderr’ undeclared (first use in this function)
blocksort.c: In function ‘BZ2_blockSort’:
blocksort.c:1117: warning: incompatible implicit declaration of built-in function ‘fprintf’
blocksort.c:1117: error: ‘stderr’ undeclared (first use in this function)
make: *** [blocksort.o] Error 1
### execution of make failed, exit code 2
Removing build lock…
/sw/bin/dpkg-lockwait -r fink-buildlock-bzip2-1.0.3-1
(Reading database ... 4132 files and directories currently installed.)
Removing fink-buildlock-bzip2-1.0.3-1 ...
Failed: phase compiling: bzip2-1.0.3-1 failed
My current version of gcc is 4.0.1
When I try to run “sudo gcc_select 4.0.0”, I get the following error msg:
The following is missing from your gcc 4.0.0 compiler installation.
Reinstall the 4.0.0 compiler, or use another release.
/usr/bin/gcc-4.0.0
/usr/bin/g++-4.0.0
/usr/include/gcc/darwin/4.0.0/stdint.h
/usr/include/gcc/darwin/4.0.0/
What can I do to solve this?
Thanks so much Jamie!
Regards,
Andrew.
Posted by Andrew on August 21, 2006 at 04:28 AM
Andrew.
Did you install the Apple GCC stuff? It sounds like your copy of GCC is hosed. I’ve never seen the errors you are getting.
My first suggestion would be to re download the developer stuff from Apple and then reinstall it all with the default settings and see if that changes anything.
Jamie
Posted by Jamie on August 21, 2006 at 09:35 AM
Hi Jamie!
I managed to install ethereal into my mac. I found out the error “C compiler cannot create executables” was caused by the fact i hadn’t installed DevSDK into my com.
Installing the DevSDK from Xcode tools solved the problems.
Thank you once again for your fabulous walkthrough!
Regards,
Andrew
Posted by Andrew on August 23, 2006 at 08:07 PM
Thanks for the great post. I am makeing the jump to MAC from many years of Windows. I am mostly in a terminal all day beating on Cisco equipment and *nix seemed to have the best tools to use. It has taken me serveral weeks to get all my tools I am just to using and Etherreal was the last one I had to have. I only had to walk the instructions one time and it worked like a charm. Now that I have Ethreal I have not started Parallels for M$ in a few days. Thanks again. Also thanks for the tip on ADC.
~Paul~
Posted by Paul Ingram on October 09, 2006 at 10:13 PM
Thanks for the comments Paul.
If I didn’t have to test websites in IE 6 regularly I would little real reason to start up my Windows machine.
Working in a Networking lab is what got me really interested in Unix for the first time. I had no clue before how much information was available in a simple packet. If people only knew. :)
Posted by Jamie on October 09, 2006 at 10:39 PM
Just got a new intel based computer. This worked great on my previous G4, but I am having problems installing. Here is a snippet of what I am looking at:
Setting runtime build-lock…
dpkg-deb -b /sw/src/fink.build/root-fink-buildlock-gdbm3-1.8.3-2 /sw/src/fink.build
dpkg-deb: building package `fink-buildlock-gdbm3-1.8.3-2’ in `/sw/src/fink.build/fink-buildlock-gdbm3-1.8.3-2_2006.11.04-21.07.32_darwin-i386.deb’.
Installing build-lock package…
/sw/bin/dpkg-lockwait -i /sw/src/fink.build/fink-buildlock-gdbm3-1.8.3-2_2006.11.04-21.07.32_darwin-i386.deb
Selecting previously deselected package fink-buildlock-gdbm3-1.8.3-2.
(Reading database ... 4183 files and directories currently installed.)
Unpacking fink-buildlock-gdbm3-1.8.3-2 (from .../fink-buildlock-gdbm3-1.8.3-2_2006.11.04-21.07.32_darwin-i386.deb) ...
Setting up fink-buildlock-gdbm3-1.8.3-2 (2006.11.04-21.07.32) ...
gzip -dc /sw/src/gdbm-1.8.3.tar.gz | /sw/bin/tar -xf - --no-same-owner --no-same-permissions
patch -p1 </sw/fink/dists/stable/main/finkinfo/libs/gdbm3.patch
patching file Makefile.in
./configure --prefix=/sw --mandir=’${prefix}/share/man’ --infodir=’${prefix}/share/info’
checking for gcc… gcc
checking for C compiler default output… configure: error: C compiler cannot create executables
check `config.log’ for details.
### execution of ./configure failed, exit code 77
Removing runtime build-lock…
Removing build-lock package…
/sw/bin/dpkg-lockwait -r fink-buildlock-gdbm3-1.8.3-2
(Reading database ... 4184 files and directories currently installed.)
Removing fink-buildlock-gdbm3-1.8.3-2 ...
Failed: phase compiling: gdbm3-1.8.3-2 failed
Any ideas of what’s going on or how I can fix this?
Posted by Jimmy on November 04, 2006 at 11:10 PM
I found out X11 acts funny with migration assistant. Reinstalled EVERYTHING, and Ethereal starts up! However, I keep getting the message,"No packets captured! As no data was captured, closing the temporary capture file!” Huh? As it’s running, I can see the packet count increasing. How do I fix this? BTW, I am running version 0.10.12.
Posted by Jimmy on November 13, 2006 at 11:02 PM
Hi Jamie,
first of all, THANKS for the Ethereal install tutorial! That is really detailed and comprehensive.
Unfortubately I ran into the following problem after I follwed your instructions and ran
‘fink install ethereal’:
-----
ranlib .libs/libpango-ot.a
creating libpango-ot.la
(cd .libs && rm -f libpango-ot.la && ln -s ../libpango-ot.la libpango-ot.la)
/bin/sh ../../libtool --mode=link gcc -O3 -funroll-loops -fstrict-aliasing -pipe -Wall -no-undefined -L/usr/X11R6/lib -o ottest ottest.o disasm.o libpango-ot.la -L/usr/X11R6/lib -lfontconfig -L/usr/X11R6/lib -lfreetype
gcc -O3 -funroll-loops -fstrict-aliasing -pipe -Wall -o ottest ottest.o disasm.o -L/usr/X11R6/lib ./.libs/libpango-ot.a -lfontconfig -lfreetype
ld: warning prebinding disabled because of undefined symbols
ld: Undefined symbols:
_CloseResFile
_CopyPascalStringToC
_FMCreateFontFamilyInstanceIterator
_FMCreateFontFamilyIterator
_FMDisposeFontFamilyInstanceIterator
_FMDisposeFontFamilyIterator
_FMGetFontContainer
_FMGetFontFamilyName
_FMGetNextFontFamily
_FMGetNextFontFamilyInstance
_FSClose
_FSGetCatalogInfo
_FSMakeFSSpec
_FSOpenResourceFile
_FSPathMakeRef
_FSpGetFInfo
_FSpMakeFSRef
_FSpOpenRF
_FSpOpenResFile
_Get1IndResource
_Get1Resource
_GetEOF
_GetHandleSize
_GetResInfo
_GetResource
_HLock
_HUnlock
_HomeResFile
_PBGetFCBInfoSync
_ReleaseResource
_ResError
_UseResFile
make[4]: *** [ottest] Error 1
make[3]: *** [all-recursive] Error 1
make[2]: *** [all] Error 2
make[1]: *** [all-recursive] Error 1
make: *** [all] Error 2
### execution of LD_TWOLEVEL_NAMESPACE=1 failed, exit code 2
Removing runtime build-lock…
Removing build-lock package…
/sw/bin/dpkg-lockwait -r fink-buildlock-pango1-xft2-1.6.0-1
(Reading database ... 18907 files and directories currently installed.)
Removing fink-buildlock-pango1-xft2-1.6.0-1 ...
Updating the list of locally available binary packages.
Scanning dists/stable/main/binary-darwin-powerpc
New package: dists/stable/main/binary-darwin-powerpc/base/expat-shlibs_1.95.8-1_darwin-powerpc.deb
New package: dists/stable/main/binary-darwin-powerpc/base/expat_1.95.8-1_darwin-powerpc.deb
Failed: phase compiling: pango1-xft2-1.6.0-1 failed
Before reporting any errors, please run “fink selfupdate” and
try again. If you continue to have issues, please check to see if the
FAQ on fink’s website solves the problem. If not, ask on the fink-users
or fink-beginners mailing lists. As a last resort, you can try e-mailing
the maintainer directly:
The Gnome Core Team <fink-gnome-core@lists.sourceforge.net>
---------
I ran ‘fink selfupdate’ successfully as well. But still get the same problem above, as before running it.
I’d appreciate your comments.
Posted by Sergei on December 08, 2006 at 04:28 AM