This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark crash

0

Hi What is the meaning of wireshark crash?? does it mean that wireshark stopped and can't save the captured data, or it means the software itself is carshed and it doesn't work any more? what are the common mistakes that cause the crash other than running wireshark for along time (Briefly). Thanks

asked 05 Dec '12, 04:10

Leena's gravatar image

Leena
51171821
accept rate: 0%


One Answer:

1

Wireshark crash normaly refers to the application having an unrecoverable error and being terminated by the OS. The most common reasons beeing SW bugs or out-of-memory (out-of-memory may be caused by a bug). If this happens during capturing the temporary capture file can be recoverd from the temp directory up to the point of the crash or close to. No user action other than capturing enough data to cause out-of-memory should crash Wireshark.

answered 05 Dec '12, 04:23

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

does it mean that if a crash takes place I should download and install wireshark again

(05 Dec '12, 04:26) Leena
1

no, it means that you captured too much data in a single take. Just restart Wireshark and capture less data, or capture data into multiple files (see the capture options dialog).

(05 Dec '12, 04:50) Jasper ♦♦

Thanks alot everybody

(05 Dec '12, 05:20) Leena