Wireshark not launching

Before posting something, READ the changelog, WATCH the videos, howto and provide following:
Your install is: Bare metal, ESXi, what CPU model, RAM, HD, what EVE version you have, output of the uname -a and any other info that might help us faster.

Moderator: mike

Post Reply
bingbucks
Posts: 10
Joined: Thu Oct 25, 2018 4:19 am

Wireshark not launching

Post by bingbucks » Tue Mar 24, 2020 2:44 pm

Hey Uldis / et al.

Got some weird behavior that seems to be fairly consistent. In a nutshell, I can't launch Wireshark (I get the "The Remote Desktop Server is currently unreachable" error). But I seem to only get that error when I try to launch WireShark in labs that I created with the same username. If I have someone else create the lab (in a different username) and then I log in with my normal username, everything works find. Even if they created that "new" lab by cloning a lab of mine that doesn't work for me, then every thing is fine.

To summarize (and this has pretty much been the pattern almost 100%):
If I capture as a user different from the one that created the lab, it works... Otherwise it won't work for me...


I realize my results are unscientific here, but after experimenting for 6 hours, I gave up and had someone else create my lab so that I could capture on it.

Anything obvious here I'm missing?

The EVE lab is 2.0.6-34-PRO

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: Wireshark not launching

Post by Uldis (UD) » Tue Mar 24, 2020 8:59 pm

Make sure you have installed Dockers on your EVE Pro.
Type in eve root cli
dc images

it must show list of dockers in your eve.

If you dont see any docker

Install them

apt install eve-ng-dockers

bingbucks
Posts: 10
Joined: Thu Oct 25, 2018 4:19 am

Re: Wireshark not launching

Post by bingbucks » Wed Mar 25, 2020 3:23 pm

root@eve-lab-1:~# dc images
REPOSITORY TAG IMAGE ID CREATED SIZE
eve-wireshark latest 413aae02d43d 3 months ago 1.62GB
eve-firefox latest 8882ac260c1f 3 months ago 2.15GB
eve-gui-server latest 35d3676ee350 3 months ago 3.67GB
eve-desktop latest b041a187ded9 3 months ago 3GB
dockergui-rdp latest be03f3b46439 3 months ago 1.29GB
phusion/baseimage 0.9.22 877509368a8d 2 years ago 225MB

****
I *CAN* pull up WireShark but ONLY if I'm logged in as a different user than the one that created the lab (for the most part).

Why the bizarre behavior and why does it matter which user is trying to WireShark?

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: Wireshark not launching

Post by Uldis (UD) » Thu Mar 26, 2020 10:04 am

It doesnt matter with what user you are logged in eve lab, wireshark works independantly for every user

bingbucks
Posts: 10
Joined: Thu Oct 25, 2018 4:19 am

Re: Wireshark not launching

Post by bingbucks » Sat Mar 28, 2020 2:14 am

I understand, but it's not working for labs that I create. WireShark only works for me in labs that someone else created.

For example.
User #1 creates lab. User #1 tries to use WireShark on that lab. WireShark does not work.
User #2 creates lab. User #1 tries to use WireShark on that lab. WireShark does work.

Why is this?

Uldis (UD)
Posts: 5067
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: Wireshark not launching

Post by Uldis (UD) » Sat Mar 28, 2020 3:28 pm

Join to eve ive chat to talk about it..
very less info you had provided to answer you
https://www.eve-ng.net/index.php/live-helpdesk/
use gmail account to join

Post Reply