This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark Capture Crashing

0

I'm trying to setup wireshark on a server in our environment. I have downloaded the most current version at this time 1.8.4 and installed the WinPcap that comes with it.

I have tried a few different settings to see if i can get different behavior, i have been unsuccessful.

I have set the following parameters and it will work for about 20 minutes and then wireshark crashes with C++ runtime issues.

Next File Every 15 minutes Ring buffer with 2 files

I have tried varying these values to see if any difference no luck. Wireshark seems to always crash after about 20 minutes. I'm looking to get this working for debugging we need on a server.

Thanks, Greg

asked 07 Dec '12, 12:25

absoluteg449's gravatar image

absoluteg449
1112
accept rate: 0%

This is what i see when it breaks: Problem signature: Problem Event Name: APPCRASH Application Name: wireshark.exe Application Version: 1.8.4.46250 Application Timestamp: 50b66046 Fault Module Name: libglib-2.0-0.dll Fault Module Version: 2.32.2.0 Fault Module Timestamp: 4faa7bfc Exception Code: 40000015 Exception Offset: 000000000004fd12 OS Version: 6.1.7600.2.0.0.272.7 Locale ID: 1033 Additional Information 1: 26cb Additional Information 2: 26cb520882fc9cea3b5c8c04fa568662 Additional Information 3: 2ad2 Additional Information 4: 2ad2e6f5b836401c72b8f768cc4a55f1

(07 Dec '12, 12:26) absoluteg449

One Answer:

0

There are several of these report here and it's most certainly a problem with memory usage.

http://wiki.wireshark.org/KnownBugs/OutOfMemory

One user reported to have fixed the problem, by re-installing Wireshark.

http://ask.wireshark.org/questions/6031/wireshark-is-faulting-on-windows-7

Solution: Don't capture with Wireshark, use dumpcap instead.

http://www.wireshark.org/docs/man-pages/dumpcap.html

After you have captured the data with dumpcap, you can analyze the files with Wireshark.

Regards
Kurt

answered 07 Dec '12, 12:37

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%