This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I have problem with remote capturing. After 6-7 minutes from tshark remote start, pcap file stops growing. Nothing happens, no errors shows up. Dumpcap.exe is still running in Task Manager, and the lock to pcap file is still holding by dumpcap. I use command: C:\Program Files (x86)\Wireshark\tshark.exe -i rpcap://[10.154.5.33]:2002/\Device\NPF_{E5C7CD1D-35A9-4C3C-8E5F-C0BC37904D10} -w D:/tshark_dump.pcap

BR, Paul

asked 17 Oct '12, 01:23

Paul_PL's gravatar image

Paul_PL
1111
accept rate: 0%


This is probably not a problem with the remote capture in itself, but with tshark crashing because it ran out of memory.

See http://wiki.wireshark.org/KnownBugs/OutOfMemory

permanent link

answered 17 Oct '12, 05:12

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×89
×8

question asked: 17 Oct '12, 01:23

question was seen: 3,315 times

last updated: 17 Oct '12, 05:12

p​o​w​e​r​e​d by O​S​Q​A