This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

dumpcap.exe stops remote capture after 6-7 minutes

0

Hi,

I have problem with remote capturing. After 6-7 minutes from tshark remote start, pcap file stops growing. Nothing happens, no errors shows up. Dumpcap.exe is still running in Task Manager, and the lock to pcap file is still holding by dumpcap. I use command: C:\Program Files (x86)\Wireshark\tshark.exe -i rpcap://[10.154.5.33]:2002/\Device\NPF_{E5C7CD1D-35A9-4C3C-8E5F-C0BC37904D10} -w D:/tshark_dump.pcap

BR, Paul

asked 17 Oct '12, 01:23

Paul_PL's gravatar image

Paul_PL
1111
accept rate: 0%


One Answer:

1

This is probably not a problem with the remote capture in itself, but with tshark crashing because it ran out of memory.

See http://wiki.wireshark.org/KnownBugs/OutOfMemory

answered 17 Oct '12, 05:12

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%