This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Child capture process exited: exited status 127

0

I am working on Ubuntu 10.10 and wireshark 1.2.11. Every time I choose an interface to start captureing, i got the error ¨Child capture process exited: exited status 127¨. Does anybody have any solutions?

thanks Levi

asked 11 Apr '11, 10:23

LeviVic's gravatar image

LeviVic
1223
accept rate: 0%


One Answer:

0

Since you are most likely using Bash, this is probably a "command not found" error. If I recall correctly, you should be getting a different error in the case that Wireshark can't start a capture, but it is possible that this is a path problem.

The "child capture process" is dumpcap, so the error likely means that dumpcap is not on your PATH. Try running which dumpcap. If there is no output then you need to add dumpcap to your path. The executable is usually in /usr/bin/ (if you used apt or synaptic to install Wireshark) or /usr/local/bin if you compiled Wireshark yourself. Normally, these directories are on your path, so it may be that dumpcap is in a different directory (which may be the case if you compiled Wireshark with a custom prefix or installed it to a nonstandard directory).

answered 11 Apr '11, 10:59

multipleinterfaces's gravatar image

multipleinte...
1.3k152340
accept rate: 12%

Thanks. But I installed Wireshark using Ubuntu Software Center and dumpcap file is just in /usr/bin as by default.

(11 Apr '11, 11:15) LeviVic

In that case, can you be more specific about the error you encounter? Specifically, what specific steps reproduce the problem, how is the message presented, and is there any additional text with the error message?

(11 Apr '11, 12:02) multipleinte...