This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark with openflow

0

Hello,

I am facing problems in using wireshark with openflow. I am currently running on 14.04.1-Ubuntu with wireshark 1.10.6.

I need to check openflow protocol for the installed version of wireshark. I tried may ways to install plugins but no luck. Below are the steps I followed:

  1. sudo apt-get install libgtk2.0-dev
  2. export WIRESHARK=/usr/include/wireshark
  3. cd of-dissector/src
  4. sudo scons install scons: Reading SConscript files ... ### ERROR: You need to set the WIRESHARK environment variable to the location of your wireshark include directory. ### ERROR: (such that epan/packet.h is a valid include path)

Though env variable set correctly, it is throwing me above error.

[email protected]:~/of-dissector/src$ echo $WIRESHARK
/usr/include/wireshark/

Can anyone please throw some light on this issue step by step?

Thanks, Basavaraj

asked 13 May '16, 03:22

Basavaraj's gravatar image

Basavaraj
6●1●1●3
accept rate: 0%

edited 13 May '16, 03:27

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206

Where did you get this openflow dissector from?

(13 May '16, 03:24) grahamb ♦

I got it from https://bitbucket.org/barnstorm/of-dissector.

(13 May '16, 03:49) Basavaraj

It might be easier to install a newer version of Wireshark with openflow support built in from https://launchpad.net/~wireshark-dev/+archive/ubuntu/stable

(13 May '16, 04:01) Anders ♦

Thanks for the response. @Anders: I installed latest wireshark using the link you shared. But when I launch wireshark, I get error: [email protected]:~$ sudo wireshark QXcbConnection: Failed to get the primary output of the screen XIO: fatal IO error 2 (No such file or directory) on X server "localhost:13.0" after 176 requests (176 known processed) with 0 events remaining.

Any pointer from your side?

(13 May '16, 04:40) Basavaraj

If you are running over x use the legacy version wireshark-gtk

(13 May '16, 04:46) Anders ♦

One Answer:

1

Plus that dissector appears to be for old versions of openflow and uses a very non-standard (for Wireshark) build system (scons).

If you want support for that dissector, you'll have to go to the author.

answered 13 May '16, 04:07

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%