Hello to all I try to increase the maximun packet size that Wireshark can read in order to support packets up to 16 Mbyte (or even more up to 256 Mbyte). I already changed the WTAP_MAX_PACKET_SIZE to 32 * 1024 * 1024 in wireshark/wiretap/wiretap.h and recompiled succesfully the Wireshark. I also succesfully read a PCAP file where each packet is 16 Mbyte each in command line with tshark -r file.pcap. My problem is that I cannot read the same file in the Wireshark's GUI. When I try to open the same file in GUI, the GUI is stop working. Even if I try to capture my Ethernet card the dumpcap is stop working and the message "Child dumpcap process died: Stack overflow" appears. Any suggestion of how to succesfully support packets larger than 64 Kbyte in GUI? Thanks in advance. asked 06 Jun '12, 00:13 andapo edited 14 Jun '13, 00:23 SYN-bit ♦♦ |
Just a question. Where do you actually see (single) packets with a size of 256 MByte?