Frequently Asked Questions | Ethereal Packet Sniffing (Syngress)

< Day Day Up >

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the “Ask the Author” form. You will also gain access to thousands of other FAQs at ITFAQnet.com.

1.	Can I mix methods of installation? For example, can I install libpcap with the RPM and then build Ethereal from source, or vice-versa?
2.	What if I installed Ethereal and then later upgraded to GTK+ v2?
3.	A new version of Ethereal was released and I want to upgrade, how do I do that?
4.	A new version of WinPcap was released, how do I upgrade to it?	$first go to the directory with your current version of winpcap (usually c:\program files\winpcap) and run the uninstall.exe program. reboot and proceed with installing the executable for the new version.$
5.	I installed everything and it looks like it worked ok, but when I try to run Ethereal it says it can’t find it?
6.	Why do I have to install all this other stuff just to compile Ethereal?
7.	I got really excited and installed Ethereal on my Windows system without installing WinPcap first. What should I do?

Answers

1.	Yes you can, as long as your OS supports the methods you are trying to use. For example, you can’t use pkgadd on Linux.
2.	No problem, just re-run the configure script for Ethereal with --enable-gtk2 and then run make and make install again.
3.	For Linux, you would use the rpm –Uvh command. For Solaris you would use the pkgrm command to remove the old version, then pkgadd to add to the new version. For Windows, simply run the new executable and it will upgrade your current version. If you have compiled the code from source you will need to perform the configure \| make \| make install process again for the new version.
4.	First go to the directory with your current version of WinPcap (usually C:\Program Files\WinPcap) and run the uninstall.exe program. Reboot and proceed with installing the executable for the new version.
5.	Make sure the Ethereal directory is in the proper path, for example, /usr/local/bin. Also, if you are installing the Linux RPMs, make sure you install the GTK+ version as well as the base version.
6.	Ethereal is a feature-rich, multi-faceted software program. It relies on the details of some previously written libraries to take care of the low level functions.
7.	The Windows version of Ethereal can detect the presence of WinPcap at run time, so go ahead and install the current version of WinPcap and then run Ethereal.

< Day Day Up >