This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi everybody,

yesterday i made capture session with three wireshark machines and i used the "stop capture" and "use multiple files" option on all machines. At the end of the capture time, all machines were unuseable, wireshark shows "closing file please wait" and thats it. After killing wireshark the pcs are working normal. I use the 1.8.4 version. Perhaps anybody knows or have seen this too? Thanks for help.

Mike

asked 24 Jan '13, 06:40

mikethebandit31's gravatar image

mikethebandit31
11223
accept rate: 0%


Yes, that is probably the typical out-of-memory problem that happens when Wireshark runs for quite some time. You should do the capture by running the command line utility "dumpcap" instead (it's in the Wireshark directory), which is used by Wireshark to capture anyway. You can specify all the command line options necessary to make it do the same as if called by Wireshark.

permanent link

answered 24 Jan '13, 06:47

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Thanks a lot , i`ll try this option at the next time!!!

(24 Jan '13, 06:53) mikethebandit31
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×8
×7

question asked: 24 Jan '13, 06:40

question was seen: 2,091 times

last updated: 24 Jan '13, 07:27

p​o​w​e​r​e​d by O​S​Q​A