I am running wireshark version 1.10.1; and capturing layer 2 data. I have capture options configured for local interface, single channel with multiple files enabled. The next file is enabled to start after 1Mb. All other options are disabled. The capture duration between failure is 20 files =/- 3 files. The runtime error is - This application has requested the Runtime to terminate it in an unusual way. Please advise what is required to resolve this issue. asked 14 Aug '13, 10:25  eanderson |
One Answer:
How long was the capture running before the crash? If it was running for a long period of time (where long is not well-defined, unfortunately), then perhaps it was an "Out of memory" condition that caused it? If so, consider using dumpcap instead. answered 14 Aug '13, 12:18  cmaynard ♦♦ |
Thank you very much cmaynard! command line tshark -i 2 -b filesize:100000 -b files:50 -b duration:7200 -f "ether dst host ff:04:ff:ff:ff:ff" -w d:\test.pcap is the string my Support Team provided and it's working fine now. Only problem is the command line execution can't be viewed thru the wireshark interface on the fly.