This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Increase maximun packet size (more than 64 Kbyte)

0

Hello to all

I try to increase the maximun packet size that Wireshark can read in order to support packets up to 16 Mbyte (or even more up to 256 Mbyte). I already changed the WTAP_MAX_PACKET_SIZE to 32 * 1024 * 1024 in wireshark/wiretap/wiretap.h and recompiled succesfully the Wireshark. I also succesfully read a PCAP file where each packet is 16 Mbyte each in command line with tshark -r file.pcap.

My problem is that I cannot read the same file in the Wireshark's GUI. When I try to open the same file in GUI, the GUI is stop working. Even if I try to capture my Ethernet card the dumpcap is stop working and the message "Child dumpcap process died: Stack overflow" appears.

Any suggestion of how to succesfully support packets larger than 64 Kbyte in GUI?

Thanks in advance.

asked 06 Jun '12, 00:13

andapo's gravatar image

andapo
1223
accept rate: 0%

edited 14 Jun '13, 00:23

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245

Any suggestion of how to succesfully support packets larger than 64 Kbyte in GUI?

Just a question. Where do you actually see (single) packets with a size of 256 MByte?

(14 Jun '13, 03:04) Kurt Knochner ♦