This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am running wireshark version 1.10.1; and capturing layer 2 data. I have capture options configured for local interface, single channel with multiple files enabled. The next file is enabled to start after 1Mb. All other options are disabled. The capture duration between failure is 20 files =/- 3 files. The runtime error is - This application has requested the Runtime to terminate it in an unusual way.

Please advise what is required to resolve this issue.

asked 14 Aug '13, 10:25

eanderson's gravatar image

eanderson
11112
accept rate: 0%


How long was the capture running before the crash? If it was running for a long period of time (where long is not well-defined, unfortunately), then perhaps it was an "Out of memory" condition that caused it? If so, consider using dumpcap instead.

permanent link

answered 14 Aug '13, 12:18

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Thank you very much cmaynard! command line tshark -i 2 -b filesize:100000 -b files:50 -b duration:7200 -f "ether dst host ff:04:ff:ff:ff:ff" -w d:\test.pcap is the string my Support Team provided and it's working fine now. Only problem is the command line execution can't be viewed thru the wireshark interface on the fly.

(15 Aug '13, 07:06) eanderson
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×193
×14
×13

question asked: 14 Aug '13, 10:25

question was seen: 1,914 times

last updated: 15 Aug '13, 07:40

p​o​w​e​r​e​d by O​S​Q​A