problèmes avec wireshark après passage sur Jessie

Support Debian
#1

Je suis passé sous Jessie.
Toutes les commandes apt m’affichent ce message:

Setting up wireshark-common (1.12.1+g01b65bf-4) ... Executing "addgroup --quiet --system wireshark" failed. Most probably the wireshark group exists, but is not a system group. Please delete the existing group or re-create it as a system group and try configuring wireshark-common again. dpkg: error processing package wireshark-common (--configure): subprocess installed post-installation script returned error exit status 1 Errors were encountered while processing: wireshark-common E: Sub-process /usr/bin/dpkg returned an error code (1)

J’ai essayé pas mal de chose (reconfigure, purge, etc…) mais rien n’y fait
J’ai essayé de désinstaller wireshark mais refuse.

#2

Bonsoir,

Je pense que tu devrais voir:
wireshark:x:wireshark

Si c’est le cas fait un:

Enfin, si tu n’as pas déja essayé.

#3

Bonjour,

J’ai fais:

Si je fais:

J’ai le message:

Je ne fais pas plus pour l’instant …

#4

Salut,

Dans quel contexte ?
Un retour (copier/coller) complet lors de l’utisation d’[mono]apt[/mono], [mono]apt-get[/mono] ou [mono]aptitude[/mono] s’impose.

En prime.

[code]$ dpkg -l |grep wireshark

find /etc/apt -name ‘.list’ -exec bash -c ‘echo -e “\n$1\n”; nl -ba “$1”’ _ ‘{}’ ;

$ apt-cache policy
$ uname -a && lsb_release -dirc[/code]

#5

[code]apt-get install wireshark
Reading package lists… Done
Building dependency tree
Reading state information… Done
The following extra packages will be installed:
wireshark-common
The following NEW packages will be installed:
wireshark wireshark-common
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/952 kB of archives.
After this operation, 2,818 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Preconfiguring packages …
Selecting previously unselected package wireshark-common.
(Reading database … 213933 files and directories currently installed.)
Preparing to unpack …/wireshark-common_1.12.1+g01b65bf-4_amd64.deb …
Unpacking wireshark-common (1.12.1+g01b65bf-4) …
Selecting previously unselected package wireshark.
Preparing to unpack …/wireshark_1.12.1+g01b65bf-4_amd64.deb …
Unpacking wireshark (1.12.1+g01b65bf-4) …
Processing triggers for man-db (2.7.0.2-5) …
Processing triggers for hicolor-icon-theme (0.13-1) …
Processing triggers for menu (2.1.47) …
Processing triggers for desktop-file-utils (0.22-1) …
Processing triggers for mime-support (3.58) …
Processing triggers for shared-mime-info (1.3-1) …
Unknown media type in type 'all/all’
Unknown media type in type 'all/allfiles’
Unknown media type in type 'uri/mms’
Unknown media type in type 'uri/mmst’
Unknown media type in type 'uri/mmsu’
Unknown media type in type 'uri/pnm’
Unknown media type in type 'uri/rtspt’
Unknown media type in type 'uri/rtspu’
Setting up wireshark-common (1.12.1+g01b65bf-4) …
Executing “addgroup --quiet --system wireshark” failed.
Most probably the wireshark group exists, but is not a system group.
Please delete the existing group or re-create it as a system group and try configuring wireshark-common again.
dpkg: error processing package wireshark-common (–configure):
subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of wireshark:
wireshark depends on wireshark-common (= 1.12.1+g01b65bf-4); however:
Package wireshark-common is not configured yet.

dpkg: error processing package wireshark (–configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
wireshark-common
wireshark
E: Sub-process /usr/bin/dpkg returned an error code (1)
[/code]

En plus du conseil “delete user” j’ai deleté le groupe wireshark. Je ne pouvais pas avant.
Puis j’ai fais apt-get install wireshark: maintenant il n’y a plus d’erreurs MAIS “refresh interfaces” affiche aucun interface !

/etc/apt/sources.list

     1	deb http://mirror.switch.ch/ftp/mirror/debian/ wheezy main contrib non-free
     2	deb http://security.debian.org/ wheezy/updates main contrib non-free
     3	
     4	deb http://mirror.switch.ch/ftp/mirror/debian/ jessie main contrib non-free
     5	deb http://security.debian.org/ jessie/updates main contrib non-free

apt-cache policy Package files: 100 /var/lib/dpkg/status release a=now 500 http://dl.google.com/linux/earth/deb/ stable/main i386 Packages release v=1.0,o=Google, Inc.,a=stable,n=stable,l=Google,c=main origin dl.google.com 500 http://dl.google.com/linux/earth/deb/ stable/main amd64 Packages release v=1.0,o=Google, Inc.,a=stable,n=stable,l=Google,c=main origin dl.google.com 500 http://security.debian.org/ jessie/updates/non-free Translation-en 500 http://security.debian.org/ jessie/updates/main Translation-en 500 http://security.debian.org/ jessie/updates/contrib Translation-en 500 http://security.debian.org/ jessie/updates/non-free i386 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=non-free origin security.debian.org 500 http://security.debian.org/ jessie/updates/contrib i386 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=contrib origin security.debian.org 500 http://security.debian.org/ jessie/updates/main i386 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=main origin security.debian.org 500 http://security.debian.org/ jessie/updates/non-free amd64 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=non-free origin security.debian.org 500 http://security.debian.org/ jessie/updates/contrib amd64 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=contrib origin security.debian.org 500 http://security.debian.org/ jessie/updates/main amd64 Packages release v=8,o=Debian,a=stable,n=jessie,l=Debian-Security,c=main origin security.debian.org 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/non-free Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/main Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/contrib Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/non-free i386 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=non-free origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/contrib i386 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=contrib origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/main i386 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=main origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/non-free amd64 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=non-free origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/contrib amd64 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=contrib origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ jessie/main amd64 Packages release v=8.0,o=Debian,a=stable,n=jessie,l=Debian,c=main origin mirror.switch.ch 500 http://security.debian.org/ wheezy/updates/non-free Translation-en 500 http://security.debian.org/ wheezy/updates/main Translation-en 500 http://security.debian.org/ wheezy/updates/contrib Translation-en 500 http://security.debian.org/ wheezy/updates/non-free i386 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=non-free origin security.debian.org 500 http://security.debian.org/ wheezy/updates/contrib i386 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=contrib origin security.debian.org 500 http://security.debian.org/ wheezy/updates/main i386 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=main origin security.debian.org 500 http://security.debian.org/ wheezy/updates/non-free amd64 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=non-free origin security.debian.org 500 http://security.debian.org/ wheezy/updates/contrib amd64 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=contrib origin security.debian.org 500 http://security.debian.org/ wheezy/updates/main amd64 Packages release v=7.0,o=Debian,a=oldstable,n=wheezy,l=Debian-Security,c=main origin security.debian.org 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/non-free Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/main Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/contrib Translation-en 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/non-free i386 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=non-free origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/contrib i386 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=contrib origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/main i386 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=main origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/non-free amd64 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=non-free origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/contrib amd64 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=contrib origin mirror.switch.ch 500 http://mirror.switch.ch/ftp/mirror/debian/ wheezy/main amd64 Packages release v=7.8,o=Debian,a=oldstable,n=wheezy,l=Debian,c=main origin mirror.switch.ch Pinned packages: 

uname -a && lsb_release -dirc
Linux debian 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt9-3~deb8u1 (2015-04-24) x86_64 GNU/Linux
Distributor ID:	Debian
Description:	Debian GNU/Linux 8.0 (jessie)
Release:	8.0
Codename:	jessie
#6

Jolie ligne de commande bash BelZéButh …

Que donne un:

?

#7 

apparemment c'est le user qui n'a pas la permission d'accéder à dumpcap
[code]ls -l dumpcap
-rwxr-xr-- 1 root wireshark 85664 Mar 26 21:01 dumpcap
[/code]

Si je lance wireshark depuis un terminal root les interfaces sont visibles.

Reste plus à trouver comment un user peut accéder à dumpcap  :wink:

apparemment c’est le user qui n’a pas la permission d’accéder à dumpcap

ls -l dumpcap -rwxr-xr-- 1 root wireshark 85664 Mar 26 21:01 dumpcap

Si je lance wireshark depuis un terminal root les interfaces sont visibles.

Reste plus à trouver comment un user peut accéder à dumpcap :wink:

#8

Pour avoir testé wireshark, je sais qu’il fonctionne beaucoup mieux avec quelques privilèges.

Rq: Je l’ai testé sous wheezy, mais je n’ai pas de goupe wireshark.

Tu peux faire:

puis:

Avec cette méthode, je n’ai qu’une erreur au lancement, mais ça semble fonctionner.

Peut être peux tu faire ??? A tester …

#9

J’ai fais:

Moi aussi je l’utilisais sous wheezy. Apparemment il n’a pas supporté le passage sur jessie.
D’autre part je l’utilisais en root ce qui n’est pas bon.

Il n’y a pas besoin de gksu: suffit de lancer wireshark depuis un terminal root.

Je pense qu’il faut donner plus d’acces au groupe wireshark au fichier dumpcap -rwxrwxr-- mais est-ce la bonne solution ?

#10

J’ai fais chmod 777 sur le fichier dumpcap et maintenant je vois les interfaces dans wireshark en étant non-root. Mais ce n’est surement pas la bonne solution !

#11

Deux liens qui traitent de ce sujet:
http://blog.rom1v.com/2012/06/utiliser-wireshark-sous-debian/
http://kifeo.blogspot.fr/2012/03/faire-fonctionner-wireshark-en-non-root.html

#12

Merci beaucoup !