Entware Network packet capture with Tshark

[deveals]

Hello and good day! I've installed Wireshark and use tshark on the command line to capture network packets. Tshark ran for several months capturing packets but now hangs:

tshark -z

Running as user "xxxxx" and group "root". This could be dangerous.

tshark -Nnm -t ad -c 1 -i br0 -i eth0 -T fields -e frame.number -e _ws.col.Time -e frame.interface_name -e frame.protocols -e frame.len

Running as user "xxxxx" and group "root". This could be dangerous.

All tshark commands stop at this same location. So for I've tried restart, remove/reinstall Wireshark (tshark is included in Wireshark), and system reset to factory default/reinstall. I haven't upgraded firmware within 30 day nor changed router settings. General web search suggests Wireshark/tshark permission issue but I'm unsure if permissions issue because tshark commands previously worked for several months.

Has anyone seen this type of issue or can provide suggestions how to correct?

 

[Justinh]

Sorry, I can't help with your issue (other than to suggest a full reset). You are running stock firmware? How did you install Wireshark/tshark?

 

[deveals]

Hi Justinh. Review and consideration appreciated. Yes, very odd for Tshark to stop operating after running for serveral months.

I'm running Merlin and installed the Entware version of Wireshark. I'll keep checking for an overlooked Wireshark/Tshark config or log setting. Thanks. Danny.