Version 2.0.2 (v2.0.2-0-ga16e22e from master-2.0)
I am trying to run a packet capture using the above version. I have windows 10 on the laptop. The capture is being done on a Cisco 6880. I have the port on the switch setup to monitor all VLAN traffic on the switch. It will run fine for a little while and then an error occurs and the application terminates. All the message says is"wireshark has stopped working, a problem caused the program to sop working correctly. Windows will close the program"
asked 11 Mar '16, 07:48
This sounds like a bug which might be related to specific contents of a particular captured packet. It could be useful to run dumpcap instead of Wireshark for, say, triple the time it normally takes Wireshark to crash, and then try to open the capture file saved by dumpcap with Wireshark. If in this case Wireshark crashes too, it is worth filing a bug and attaching that capture.
BTW, the error message you can see is a Windows message, not a Wireshark one.
answered 11 Mar '16, 08:08
What's the expected traffic rate? Are you running the 32 bit or 64 bit version of Wireshark?
Given that you're trying to "monitor all VLAN traffic on the switch" I'd suspect that you're simply running out of memory, which is more likely if you're using the 32 bit version.
As @sindy says, try using dumpcap to make the capture as that doesn't retain state or dissect as much traffic so is less likely to run out of memory or hit any possible bug.
answered 11 Mar '16, 10:00
Have you tried compatibility mode ? WireShark may not be yet compatible with Windows 10 yet.
answered 11 Mar '16, 10:08