This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

alt text

asked 04 Feb '15, 09:56

opus's gravatar image

opus
6112
accept rate: 0%


What version of wireshark, and is this 32 bit or 64 bit? The Help >> About box will give you all the details.

The problem is likely to be out-of-memory. If you have a 64 bit OS, you can try a 64 bit version of Wireshark if you haven't already, else you can use editcap to split the capture into smaller files.

There is also the possibility that the issue is a bug in a dissector. You would need to post the capture in a public spot to allow others to check that.

permanent link

answered 04 Feb '15, 10:11

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thanks for responding. The behavior is occurring in version 1.12.2 (64-bit) running on a 64-bit Windows 7 Machine with 4GB of RAM. I'll try using editcap; thanks for the suggestion.

(09 Feb '15, 07:17) opus

For what it's worth, there's at least one report of 64-bit Wireshark on Windows acting as if it didn't have as much address space available as it should have if it's truly 64-bit; I'm not sure whether that's the result of not performing the appropriate ritual sacrifices over the MSVC linker to get the program to really truly be 64-bit or not.

(09 Feb '15, 14:27) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×9
×3
×3

question asked: 04 Feb '15, 09:56

question was seen: 1,363 times

last updated: 09 Feb '15, 14:27

p​o​w​e​r​e​d by O​S​Q​A