This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark keeps shutting down…

I am new to Wireshark. That being said, I am trying to analyze server packets for a period of time. Wireshark runs for a random period of time -- say 5-10 minutes and then keeps shutting down saying an unexpected error has occurred. I lose my file of captured data, etc. I have tried using multiple file settings as well.

Suggestions? Trying to find my packet errors is hard enough without the tool randomly losing everything.

unexpectedly shutdown error

asked 07 Mar '14, 07:26

cboshdave
1●1●1●2
accept rate: 0%

Please add more details

OS and OS version
Wireshark version
Capture setup (on system, switch mirror port, TAP)
How much traffic do you see on the captured port
How do you start Wireshark (RPD: see the comment of @Anders)
Do you use Capture filters? If no: why? If yes: which one?

(07 Mar '14, 10:42) Kurt Knochner ♦

One Answer:

http://blog.packet-foo.com/2013/05/the-notorious-wireshark-out-of-memory-problem/

answered 07 Mar '14, 07:27

Jasper ♦♦
23.8k●5●51●284
accept rate: 18%

Which os? Windows server and remote desktop has problems. Thank or dumpcap might be used as a workaround. Your capture files may be left in your temp direct after a crash.

(07 Mar '14, 08:43) Anders ♦

Running "dumpcap" from the command prompt seemed to do the trick. Thanks!! i was able to capture the information over an extended period of time without crashing!! I appreciate it.

(10 Mar '14, 06:51) cboshdave

@cboshdave

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(10 Mar '14, 07:52) grahamb ♦