Capturing X Traffic using ethreal

Peter Harris pharris at
Tue Jul 13 06:23:09 PDT 2010

On 2010-07-13 09:14, sami md wrote:
>  Is it possible to capture X protocol traffic using ethreal,

Yes, although ethereal is deprecated in favour of wireshark.

>  The display N listens and accepts connections on TCP port 6000+N,
>  how to capture this traffic on ethreal?

Many distros disable TCP by default. Make sure it is enabled on your
machine. Then,

export DISPLAY=tcp/localhost:0

before running your app. Also, make sure you're running wireshark as
root (so it has permission to sniff traffic).

Peter Harris
               Open Text Connectivity Solutions Group
Peter Harris          
Research and Development        Phone: +1 905 762 6001
pharris at            Toll Free: 1 877 359 4866

More information about the xorg mailing list