I run the latest svn on a simple pcap and get the following warning. Tshark version is 1.8.10
TShark 1.8.10 (SVN Rev Unknown from unknown)
No /tmp/call/frames/Frame.html was generated
# callflow /tmp/call.pcap
Running as user "root" and group "root". This could be dangerous.
Running as user "root" and group "root". This could be dangerous.
tshark: -o flag "gui.column.format: "No.", "%m", "Time", %t, "Protocol", "%p", "srcport", %S, "dstport", %D, "Info", "%i"" specifies unknown preference
callflow: warning: no "order" file found -- using auto generated
DPI: 90
Background RRGGBBAA: ffffffff
Area 0:0:50:120 exported to 50 x 120 pixels (90 dpi)
Bitmap saved as: /tmp/call/callflow.png
callflow: bz2 archive available at "/tmp/call/call.tar.bz2"
The output can be viewed with a browser:
firefox /tmp/call/index.html
Run it once more as a regular user, not as root.
What's the result.
Edit bin/callflow and change gui.column.format to column.format, I have the same issue.
Last edit: Calvin E. 2017-03-14
Code updated to prevent to run as user root: https://sourceforge.net/p/callflow/code/227/
' # callflow 4126839.pcap
callflow: error: do not run as user 'root'
Update to svn version 227.
Hi Robert,
I believe the issue being reported by Leandro is the message from tshark, not the warning about running as root.
Older versions of tshark do not have the gui.column.format preference. I experienced the same issue on CentOS 6.5 with TShark 1.8.10.
More recent versions of tshark warn:
I haven't determined at which version number this behavior changes. It would be nice if callflow could check "tshark -v" and use the version appropriate option, or just use
column.formatand ignore the warning.Replacing
gui.column.formatwithcolumn.formatresolved the issue. This was going to be part of the patch in bug #11 but I didn't have a newer version of tshark to see if the older preference was forward compatible. Looks like it is.Last edit: Calvin E. 2017-03-16
If you're reading this on the mailing list please ignore the last diff. I
forgot that I had backed out the 'gui.column.format' change before posting
it.