Hi, We are running SL 6.4. After recently upgrading it appears that wireshark seems be be needing an new libpcap which is not available in 6.4
tshark: Unknown message from dumpcap, try to show it as a string: /usr/sbin/dumpcap: symbol lookup error: /usr/sbin/dumpcap: undefined symbol: pcap_set_tstamp_precision rpm -q wireshark wireshark-1.8.10-17.el6.x86_64 rpm -q libpcap libpcap-1.0.0-6.20091201git117cb5.el6.x86_64 As far as I can see wireshark-1.8.10-17 is shipped with centos6.7 and probably RHEL6.7 not in 6.4 I have found SRPMS/vendor/libpcap-1.4.0-4.20130826git2dbcaa1.el6.src.rpm which has pcap_set_tstamp_precision so building libpcap from this rpm seems to be a workaround for now. Was updating to wireshark-1.8.10-17 a glitch? Can it be reversed? -- Leo Baltus, internetbeheerder NPO ICT Internet Services Bart de Graaffweg 2, 1217 ZL Hilversum [email protected], 035-6773555
