Frequently Asked VNC Questions
This list is being updated regularly, so, particularly if you are reading a local or mirrored copy, it's worth checking the original from time to time. The mailing list archives are also available, and they can be a good source of help - try searching them here.
NOTE: With the release of 3.3.2 we have moved some of the old questions into the Old FAQ page because they should not apply to recent versions. As with most software, it's worth checking to make sure you've got the lastest version.
The FAQ is divided into the following sections:
Q. I downloaded the .EXE files and they don't work!
Netscape seems to have a nasty habit of sticking a .EXE extension on a file when it thinks it knows what type it is. When you fill in the download form you specify the type of compression you would like to use, and this does not include .EXE, so if the thing you downloaded has that extension, change it to whatever you requested (usually .tgz) and then unpack the files using an appropriate decoder.
Q. I unpacked the files on NT and ran SETUP.EXE but nothing happens.
Make sure you have NT service pack 3 installed. It appears that the InstallShield system we use won't work without it.
Q. I ran the vncserver program and got a 'No such file or directory' message.
Vncserver is a Perl script and so the first line has to point to the place where Perl is installed. On Linux this will generally be /usr/bin/perl, on other platfroms it's more likely to be /usr/local/bin/perl. Edit the line to point to the right place and it should work.
Q. The Java client doesn't work in my browser.
Several Java implementations have bugs which upset the VNC applet. We recommend Internet Explorer 4 - we've had good results with this on both Windows machines and Macs. Netscape Navigator 3 has a bug which can cause problems; if you get the 'Method setClip not found' error, try pressing Reload.
Q. I started the X server using vncserver, but it dies with a message "Could not open default font 'fixed'. "
The 'fixed' font is needed for the server to start - if it can't find it, you need to specify the correct font path for your machine in the 'vncserver' script. If you're not sure what the path should be, type 'xset q' from within a normal X session. One of the things reported is the font path used by your current X server, which is generally the right thing to use for Xvnc. If you're on a recent version of Linux but still using VNC version 3.3.1, you may have compressed fonts which VNC doesn't understand. Either upgrade or see the Old FAQ.
Q. My viewer failed to connect to my server!
VNC relies on a correctly-configured and operational TCP/IP network, so please make 100% sure that your TCP/IP setup is right before you start asking questions on the mailing list. Here are some things you should check before assuming it's a VNC problem; consult your local expert if you don't know how to check them:
Q. My Solaris Xvnc dies with a core dump!
There is a bug in XFree86 (on which Xvnc is based) which makes Solaris servers very unreliable if they have a pixel depth of 16. Use the -depth option to start your server with a depth of 8 or 24, and you should be fine.
Q. Why can I only run vncserver/Xvnc as root?
The most likely reason for this is that Xvnc can't create the unix domain socket (the path for this unix domain socket is usually /tmp/.X11-unix/Xn). Try making sure that users can write to this directory by making it world-writable, i.e. "chmod a+w /tmp/.X11-unix". Note that to avoid a security loophole the "sticky bit" should also be set on the directory by doing "chmod o+t /tmp/.X11-unix". If you don't do this then someone else logged in to the same machine may be able to intercept the X protocol and thereby access your desktop and snoop on it, etc.
Q. Can I remote the normal X display of my workstation in the same way as the Windows server does?
It would be possible to add VNC support to a standard X server, so that it operated this way, but we have no plans to do so. We tend to run all our X sessions as VNC sessions and only use the local X server to run the viewer. It's very fast when on the same machine as the server! If you feel that it's overkill to run two X servers on the same machine, you might consider Ganesh Varadarajan's svgalib-based viewer, available from the contribs page.
Q. What X Visual does Xvnc use?
By default, vncserver will start Xvnc with the same depth as the current X display, if there is one, or 8 bits deep if there isn't. We've tried to steer clear of colour maps as much as possible and normally use "true colour", even when there are only 8 bits per pixel.
Unfortunately some X applications don't cope too well with an 8 bit TrueColor visual. You can make Xvnc use the more normal PseudoColor visual by giving a "-cc 3" option to vncserver.
Q. Can I cut and paste between the viewer and the server?
VNC supports copying and pasting of ASCII text in both directions, provided the viewer and server allow it. When the clipboard changes on the machine running the viewer, the changes are copied to the server and vice versa. Some notable exceptions:
Oops! We've noticed that the code to do copying from the X server to the viewer didn't make it in the initial upgrade to 3.3.2. It's back in 3.3.2R2
Q. Can I run the Windows server before anybody has logged in?
You can now! Make sure you have a recent WinVNC and read the section on running WinVNC as a service in the documentation.
Q. Why can't I unlock my NT workstation remotely? Why can't I stop the screensaver remotely?
Versions of WinVNC prior to 3.3.1 R15 couldn't switch between NT desktops. Later versions can if you run them as a service, though at present you'll be disconnected in the process and need to reconnect. Think of it as a security feature for now: your NT screen saver will automatically log out any connections you've accidentally left open!
Q. The dead keys don't work on my keyboard
They will soon! It's quite a challenge working out how to do international keyboard support across different platforms. We're working on dead keys.
Q. I can't type into a DOS window or any DOS apps
This derives from the fact that Windows 95 uses BIOS calls and not Windows messages to get keystrokes within the command prompt. It should be fixed in version 3.3.1 R19 and later of the WinVNC server, so if you're using an earlier version, uninstall and upgrade.
Q. The keyboard doesn't work / keys do strange things!
There is one common problem which can cause this. If a modifier key, such as Shift, Ctrl or Alt, is pressed, and the viewer window then loses focus or dies, the 'key release' message never gets to the viewer and hence never gets to the remote server. The remote machine will then think that M is Ctrl-M etc. We have done various things to reduce the chance of this happening; the viewers release various modifiers automatically when they lose focus, for example, but it can still occur and can be confusing when it does. The solution is easy: simply press and release the modifier key which is stuck. If you don't know which it is, then try them one at a time.
We've noticed that the 'cancel modifiers on loss of focus' functionality has been missed out of recent copies of the Windows viewer; it will be back in 3.3.2R1 and later.
Q. Most of my Windows apps work fine remotely, but this one doesn't update its window...
WinVNC can use a variety of hints to guess when a particular area of the screen has changed. The most useful is the occurrence of a WM_PAINT message in an application. Not all applications use these messages, though; the Windows clock is a good example.
In the registry WinVNC has a list of application names, and which things to use as update clues. A few standard applications are set up by the 'Install default registry settings' in the WinVNC section of the Start Menu; it tells WinVNC to look for timer messages from the clock, for example. Make sure you install these if you haven't already. Any other apps you run will appear in the registry, so you can easily tweak the settings. For more info, see the WinVNC documentation.
Q. My remote Windows display is appearing in a very garbled form.
There can be problems with WinVNC being unable to detect changes to the screen on certain applications, as mentioned in the previous question, but there should not generally be serious screen corruption. Make sure you have the latest service packs installed for your OS and experiment with different video drivers. WinVNC relies on various aspects of the video card and driver; in particular its ability to BitBlt correctly, and several users have solved their problems by updating the driver.
Q. I have problems with double-clicks in Windows.
By default, mouse button up events are used to signal to WinVNC that the current window may have changed and should be re-scanned. This can introduce a delay which results in a double-click being interpreted by the system as a pair of single clicks. Variations in network delays can also cause the clicks to be too widely separated when they appear at the server. Some suggestions:
Q. I'm installing WinVNC as a service on lots of machines, and I get prompted for the password on each one. Can I do this non-interactively?
Not directly, but you can by editing the registry before installing. On a machine which
already has WinVNC installed, copy all the registry settings under the
When WinVNC runs, it will see the password in that section of the registry and will not prompt you to type one in.
Q. Will VNC work through a firewall?
It depends on your firewall, and whether you want to access a server inside your firewall from elsewhere, or a server outside your firewall from inside.
Generally firewalls are designed to prevent incoming connections except to certain well-known machines and ports. If you can configure these to include your VNC server, then you will be able to access it from anywhere in the world. There is a good argument to be made for the fact that VNC is less of a security risk than X, so if your site doesn't allow X in or out it may still allow VNC.
Many modern firewalls will allow outgoing connections initiated from inside, so you can often access servers on outside machines. It is straightforward, for example, to recompile the viewer source to include SOCKS support, or to make other special arrangements. See the contribs page.
It's a pity that Java within a browser doesn't automatically use SOCKS if the browser is configured to use it. There's probably Java SOCKS support out there somewhere...
Q. How secure is VNC?
Access to your VNC desktop generally allows access to your whole environment, so security is obviously important. VNC uses a challenge-response password scheme to make the initial connection, but after that the data is unencrypted and could, in theory, be watched by other malicious users, though it's a bit harder to snoop a VNC session than, say, a telnet, rlogin, or X session. Since VNC runs over a simple single TCP/IP socket, it should be easy to add support for SSL or some other encryption scheme if this is important to you. Axel Boldt <email@example.com> suggests:
Q. How do I make VNC go faster?
We find VNC to be perfectly acceptable as our normal method of accessing Unix desktops on a daily basis. This is over a 10 M/bit ethernet on reasonably modern machines, using the X or Win32 viewer. Because Windows gives us fewer hints about what it's doing, and because we don't have the source code for Windows, the NT server has to work harder to find out what's changed, and so a really fast machine should make a big speed difference. For more information about how the Windows server works, see the WinVNC documentation. But if you've been disappointed by the speed of the Windows server, don't give up. We're improving it gradually, though it'll be a while before it's as fast as on Unix.
There are several things that can slow any VNC session down, however, and you may like to consider these if you find it too slow:
All the standard clients can do local rectangle copying, and this generally means that
dragging a full window on X is much faster than dragging its outline. If your window
manager allows this, it may speed things up. Roman Mitnitski also reports that
when he increased the mouse dragging threshold (-t option of the server) the performance
Q. Are you planning support for Macintoshes, AIX, HP-UX, SGI, Win 3.1, Windows CE, my favourite platform ?
We have provided VNC on all the platforms we use here, and it's difficult to provide binaries for anything we don't have, and it takes a while to get up to speed on new platforms. Remember that a viewer is available for any platform which runs Java, though the speed may vary quite a bit. But for many platforms it should not be difficult to compile at least the viewer. If anyone tailors the sources for a particular platform we will happily either incorporate the changes in the main source distributions or make the patches available from our site. Information about ports of VNC to several other platforms can be found on the 'contribs' page.
A Macintosh viewer is now available, and we do plan to provide a server, but we'd rather not commit ourselves to a specific time-frame yet. We have a Windows CE viewer here which we will release soon.
Q. Would things work better if you compressed the stream?
VNC incorporates really quite efficient compression in the sense that we generally send a tiny fraction of the raw data, probably something like 1/20 on average. The details are in the protocol spec if anyone's interested. On a couple of test screen dumps we found that the Hextile encoding was more efficient than GIF! I don't know whether this is true in general.
But we haven't done more general encoding after that; we've tended to the view that (a) it might introduce too much latency and (b) most modems compress pretty well anyway. We are planning some zlib-compression experiments in the near future to see how this affects things. Because different bits of the screen can be sent using different encodings, the server could, in theory, detect that one bit would be most efficiently sent as JPEG, while another would be better hextiled.
The question is always how much work it's worth doing at the server to find this out. To some degree you can control this already, because the viewers allow you to specify your preferred encoding. Under X, if your viewer and server are on the same machine the viewer will use the raw encoding by default, otherwise it will use hextile. You may find that by selecting different encodings on the command line you get better performance.
See the suggestions above about using ssh, which also provides compression.
Q. Can I use VNC over a modem without TCP/IP?
Not at present, but there's no reason why it shouldn't, and we realise that this would be useful. VNC could run over other transports such as RS232, firewire, USB, modems etc, but at present we rely on TCP/IP. This means that you can use VNC over anything which supports TCP/IP, so using it over a modem is just the same as any other network, once you have Dial-Up Networking set up. If you need to communicate directly between two machines without going via the internet/intranet, then set up a remote access server on one and dial in from the other.
We don't, at present, support simple dialup without TCP, chiefly because it involves writing a lot of code to talk to the modem. But it's on the 'suggested projects' page, so any volunteers welcome...
Q. Does VNC have any Year 2000 bugs?
The WinVNC server and Windows viewer have been tested on a PC with its date running through the 2000 boundary without any problems, so unless the underlying OS or BIOS has difficulties, VNC on a PC should be fine. The VNC part of the X-based Unix VNC server only uses dates when writing the log files; the logfile entries are timestamped with a two-digit year, but the format is easy to change if required and the entries are not intended to be machine-readable. To the best of our knowledge there are no issues with the XFree86 server on which Xvnc is based, but that is not within our control. We therefore issue the standard disclaimer: we believe the VNC code, in its entirety, to be free from Year 2000 problems, subject to the other components of the systems on which it is running.
Q. How can I install WinVNC on multiple machines?
When you run WinVNC for the first time on a machine, it will prompt you for a password. If you are doing this on a large number of machines, especially remotely, this can be a nuisance. The way to bypass this is to make sure that the target machine already knows the password by putting the encrypted version straight into the registry before installing. So:
Q. Any other tips?
Several people have indicated that they have to use Windows occasionally but prefer to use Unix most of the time, and so want to access a PC under the desk from the Unix box.
Here's a suggestion: all other things being equal, I recommend using the Windows box to view the Unix machine rather than the other way around. This is chiefly because Windows generally works better as a client than as a server, and also because PC graphics cards are often better than those in Unix workstations. Remember, you can create a VNC session of any pixel depth you like. For my day-to-day work I use a Solaris 16-bit VNC session displayed on my PC. Few of our Sun machines have more than 8-bit color hardware, but the PC has plenty of bits to spare.
If you're very anti-Windows you can make your VNC desktop the same size as the screen and set the taskbar to 'Auto hide' and just pretend you're on an X terminal, but pop up the Start menu when you have to use PowerPoint.... The Windows viewer 3.3.2R4 and later has a proper 'full-screen mode', so you don't even need to bother with auto-hide.
Q. I'm having trouble compiling VNC on my platform...
Have you checked the contribs page? Several people have provided hints on how to build VNC on other platforms. If yours is not listed there, you might at least get some clues..
For comments, feedback, etc, please see the 'Keeping in touch' page.
Copyright 1998 - The Olivetti & Oracle Research Lab