This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

why few HTTP objects can’t be saved to disk?

0

I tried to capture objects from adobe.com website. Triggered wireshark and browsed for a minute, saved the capture. When I tried to export all the objects to the disk I got an error message saying "some files could not be saved"

Got couple of questions here:

  1. Reason for the error message.
  2. What kind of objects Wireshark can't save to disk?
  3. Why we are not able to save objects "on the fly" to the disk (at this juncture I need to save the pcapng and then retrieve the objects by opening the saved trace) Any particular reason for this behavior?

asked 08 Mar '13, 17:27

krishnayeddula's gravatar image

krishnayeddula
629354148
accept rate: 6%

edited 09 Mar '13, 10:47


One Answer:

0

Reason for the error message.

Usually (from what I have seen in the code) problems in writing the data to disk (object size, length of filename, etc.) Wirshark will/should show an error message in that case. However, the several error messages are not that clear.

What kind of objects Wireshark can't save to disk?

Every kind that shows up in the list of objects (save/export dialog). I guess it's a size problem.

Why we are not able to save objects "on the fly" to the disk

Because that is not implemented. Furthermore Wireshark needs the whole communication to rebuild the objects (files, images, etc.).

To solve your problem: Please check the available disk space before you save that objects. If there is enough disk space available and you still cannot save all objects, you might run into a Wireshark bug.

Please first post here:

  • Your OS
  • Your OS version
  • Your Wireshark version (wireshark -v)

Regards
Kurt

answered 11 Mar '13, 10:07

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Thanks for the reply/

Here are the details of OS and Wireshark Version:

wireshark 1.8.4 (SVN Rev 46250 from /trunk-1.8) Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version Built using Microsoft Visual C++ 10.0 build 40219

Now the disk space: Used space: 65.9 GB Free space: 129 GB

(11 Mar '13, 11:45) krishnayeddula