This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark 2.2.0 freezes during first start after each reboot

0

After upgrading wireshark 2.0.5 to the newest 2.2.0 Wireshark is stuck at the splash screen with 99% and the message "Initializing tab listeners". I'm running windows 10 and WinPCAP 4.1.3 Anyone seen this before? Regards Jeppe

asked 08 Sep '16, 07:38

Pixelweb's gravatar image

Pixelweb
6●1●1●2
accept rate: 0%

edited 12 Sep '16, 23:50

sindy's gravatar image

sindy
6.0k●4●8●51

Downgraded back to 2.0.5 and Wireshark is running again.

(08 Sep '16, 07:56) Pixelweb

Do you have any custom plugin installed? If yes, does Wireshark start properly if you remove it?

(08 Sep '16, 11:25) Pascal Quantin

As I crashed into the same issue, I've given it some time and I've filed Bug 12845. The good news is that it seems that only the first start after reboot is affected, and that if you don't need live capturing from USB, removing USBPcapCMD.exe from the extcap directory probably hides the issue completely.

(08 Sep '16, 15:47) sindy

I am having the same issue and a uninstall and re-install did not fix the issue. I updated from 2.05 64-bit.

(08 Sep '16, 20:05) PLCMAN58

Sindy, THANKS for the suggestion to remove the USBCAPCMD.EXE file from the extcap directory. I had to reboot the computer to remove the file and I can now launch Wireshark and Wireshark Legacy 64-bit without it hanging.

I currently do not do much capturing from USB and will wait for the next release for a possible long term fix.

(08 Sep '16, 20:18) PLCMAN58

@Pixelweb, @PLCMAN58, could you please help localize the issue?

Open the plain command shell (not Powershell!), go to the directory where USBPcap is installed (if default installation paths are used, it is C:\Program Files\USBPcap), and issue the following commands:

USBPcapCMD --extcap-interfaces

This should list something similar to the following:

interface {value=\\.\USBPcap1}{display=USBPcap1} interface {value=\\.\USBPcap2}{display=USBPcap2}

Then, for each \\.\USBPcapX you get as a value on your system, issue a command

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-config --extcap-interface \\.\USBPcapX (replacing the last X with 1 .. whatever the number of root hubs in your system), and paste the complete output of all of them to a Comment here?

An example output for

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-config --extcap-interface \\.\USBPcap3

on my system is:

arg {number=0}{call=--snaplen}{display=Snapshot length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535} arg {number=1}{call=--bufferlen}{display=Capture buffer length}{tooltip=USBPcap kernel-mode capture buffer length in bytes}{type=integer}{range=0,134217728}{default=1048576} arg {number=2}{call=--capture-from-all-devices}{display=Capture from all devices connected}{tooltip=Capture from all devices connected despite other options}{type=boolflag}{default=true} arg {number=3}{call=--capture-from-new-devices}{display=Capture from newly connected devices}{tooltip=Automatically start capture on all newly connected devices}{type=boolflag}{default=true} arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select individual devices to capture from}{type=multicheck} value {arg=99}{value=1}{display=[1] Obecn├Ż rozbo─Źova─Ź USB}{enabled=true}

Yours may be much longer at least for one of the \\.\USBPcapX.

@Pixelweb, you don't need to reinstall back to 2.2.0 if you haven't yet, the result of the USBPcap which came along the 2.0.5 will provide the necessary information as well.

(09 Sep '16, 04:00) sindy

@sindy I get the error no matter if USBPcap is installed or not. Currnetly my C:\ProgramFiles\USBPcap-directory is present but completely empty Regards Jeppe

(09 Sep '16, 05:26) Pixelweb

@Pixelweb, please check the contents of your C:\Program Files\Wireshark\extcap directory. If there is something, let me know what it is, rename the whole extcap directory to something like extcap_x and create an empty extcap one next to it, and then try running Wireshark 2.2.0 again. I'm afraid the uninstall doesn't always tidy up completely. Hiding the original extcap directory from Wireshark by renaming it should eliminate any hangovers.

(09 Sep '16, 05:50) sindy

@sindy, c:\program files\wireshark\extcab contains one file: USBPcapCMD.exe I have renamed extcap dir to extcap_x and created a new dir called extcab which is empty.

I uninstalled wireshark 2.0.5 and installen version 2.2.0 - without installing the USBPcap driver. During the installation I was asked if I wanted to uninstall 2.0.5 first which I accepted.

When the 2.2.0 install was complete the extcap_x dir was still present but the empty extcab dir was gone.

Now version 2.2.0 opens up fine both the new GUI and the Legacy version.

Thanks for your help :-) Best regards Jeppe

(09 Sep '16, 06:17) Pixelweb

@Pixelweb, I'm glad it has helped you, but now please help the development team by following the steps I've given above, using the USBPcapCMD.exe located in your extcap_x directory :-)

(09 Sep '16, 06:20) sindy

@sindy, Sorry :-) Here it comes:

c:\Program Files\Wireshark\extcap_x>USBPcapCMD --extcap-interfaces

c:\Program Files\Wireshark\extcap_x>interface {value=\.\USBPcap1}{display=USBPcap1}
interface {value=\.\USBPcap2}{display=USBPcap2}


c:\Program Files\Wireshark\extcap_x>USBPcapCMD.exe –extcap-config –extcap-interface \.\USBPcap1


c:\Program Files\Wireshark\extcap_x>arg {number=0}{call=–snaplen}{display=Snapshot length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535}
arg {number=1}{call=–bufferlen}{display=Capture buffer length}{tooltip=USBPcap kernel-mode capture buffer length in bytes}{type=integer}{range=0,134217728}{default=1048576}
arg {number=2}{call=–capture-from-all-devices}{display=Capture from all devices connected}{tooltip=Capture from all devices connected despite other options}{type=boolflag}{default=true}
arg {number=3}{call=–capture-from-new-devices}{display=Capture from newly connected devices}{tooltip=Automatically start capture on all newly connected devices}{type=boolflag}{default=true}
arg {number=99}{call=–devices}{display=Attached USB Devices}{tooltip=Select individual devices to capture from}{type=multicheck}
value {arg=99}{value=5}{display=[5] Generic USB Hub}{enabled=true}
value {arg=99}{value=1}{display=[1] Intel(R) Wireless Bluetooth(R)}{enabled=true}{parent=5}
value {arg=99}{value=1_1}{display=Microsoft Bluetooth LE Enumerator}{enabled=false}{parent=1}
value {arg=99}{value=1_2}{display=Bluetooth Device (RFCOMM Protocol TDI)}{enabled=false}{parent=1}
value {arg=99}{value=1_3}{display=Microsoft Bluetooth Enumerator}{enabled=false}{parent=1}
value {arg=99}{value=1_4}{display=Bluetooth HID Device}{enabled=false}{parent=1_3}
value {arg=99}{value=1_5}{display=HID-compliant mouse}{enabled=false}{parent=1_4}
value {arg=99}{value=1_6}{display=Device Identification Service}{enabled=false}{parent=1_3}
value {arg=99}{value=1_7}{display=Jeppe SchoubyeÔÇÖs Mouse #1}{enabled=false}{parent=1_3}
value {arg=99}{value=1_8}{display=Bluetooth Device (Personal Area Network)}{enabled=false}{parent=1}
value {arg=99}{value=2}{display=[2] USB Composite Device}{enabled=true}{parent=5}
value {arg=99}{value=2_1}{display=Integrated Webcam}{enabled=false}{parent=2}
value {arg=99}{value=3}{display=[3] USB Composite Device}{enabled=true}{parent=5}
value {arg=99}{value=3_1}{display=Dell ControlVault w/ Fingerprint Swipe Sensor}{enabled=false}{parent=3}
value {arg=99}{value=3_2}{display=Control Vault w/ Fingerprint Swipe Sensor}{enabled=false}{parent=3_1}
value {arg=99}{value=3_3}{display=Broadcom Usbccid Smartcard Reader (WUDF)}{enabled=false}{parent=3}
value {arg=99}{value=3_4}{display=Smart card filter driver}{enabled=false}{parent=3_3}
value {arg=99}{value=3_5}{display=Broadcom Usbccid Smartcard Reader (WUDF)}{enabled=false}{parent=3}
value {arg=99}{value=3_6}{display=Smart card filter driver}{enabled=false}{parent=3_5}
value {arg=99}{value=3_7}{display=NFC USB Bus Driver}{enabled=false}{parent=3}
value {arg=99}{value=3_8}{display=NFC Proximity Provider}{enabled=false}{parent=3_7}


c:\Program Files\Wireshark\extcap_x>USBPcapCMD.exe –extcap-config –extcap-interface \.\USBPcap2


c:\Program Files\Wireshark\extcap_x>arg {number=0}{call=–snaplen}{display=Snapshot length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535}
arg {number=1}{call=–bufferlen}{display=Capture buffer length}{tooltip=USBPcap kernel-mode capture buffer length in bytes}{type=integer}{range=0,134217728}{default=1048576}
arg {number=2}{call=–capture-from-all-devices}{display=Capture from all devices connected}{tooltip=Capture from all devices connected despite other options}{type=boolflag}{default=true}
arg {number=3}{call=–capture-from-new-devices}{display=Capture from newly connected devices}{tooltip=Automatically start capture on all newly connected devices}{type=boolflag}{default=true}
arg {number=99}{call=–devices}{display=Attached USB Devices}{tooltip=Select individual devices to capture from}{type=multicheck}
value {arg=99}{value=21}{display=[21] Generic USB Hub}{enabled=true}
value {arg=99}{value=24}{display=[24] USB Composite Device}{enabled=true}{parent=21}
value {arg=99}{value=24_1}{display=USB Input Device}{enabled=false}{parent=24}
value {arg=99}{value=24_2}{display=HID Keyboard Device}{enabled=false}{parent=24_1}
value {arg=99}{value=24_3}{display=USB Input Device}{enabled=false}{parent=24}
value {arg=99}{value=24_4}{display=HID-compliant consumer control device}{enabled=false}{parent=24_3}
value {arg=99}{value=24_5}{display=HID-compliant vendor-defined device}{enabled=false}{parent=24_3}
value {arg=99}{value=19}{display=[19] Generic USB Hub}{enabled=true}
value {arg=99}{value=22}{display=[22] Logitech USB Camera (Pro 9000)}{enabled=true}{parent=19}
value {arg=99}{value=22_1}{display=Logitech QuickCam Pro 9000}{enabled=false}{parent=22}
value {arg=99}{value=22_2}{display=Pro 9000}{enabled=false}{parent=22}
value {arg=99}{value=22_3}{display=Microphone (Pro 9000)}{enabled=false}{parent=22_2}
value {arg=99}{value=25}{display=[25] USB Composite Device}{enabled=true}{parent=19}
value {arg=99}{value=25_1}{display=Jabra PRO 9470}{enabled=false}{parent=25}
value {arg=99}{value=25_2}{display=Headset Microphone (Jabra PRO 9470)}{enabled=false}{parent=25_1}
value {arg=99}{value=25_3}{display=Headset Earphone (Jabra PRO 9470)}{enabled=false}{parent=25_1}
value {arg=99}{value=25_4}{display=USB Input Device}{enabled=false}{parent=25}
value {arg=99}{value=25_5}{display=HID-compliant headset}{enabled=false}{parent=25_4}
value {arg=99}{value=25_6}{display=HID-compliant vendor-defined device}{enabled=false}{parent=25_4}
value {arg=99}{value=25_7}{display=HID-compliant consumer control device}{enabled=false}{parent=25_4}
value {arg=99}{value=23}{display=[23] USB Composite Device}{enabled=true}{parent=19}
value {arg=99}{value=23_1}{display=USB Input Device (Logitech Download Assistant)}{enabled=false}{parent=23}
value {arg=99}{value=23_2}{display=HID Keyboard Device}{enabled=false}{parent=23_1}
value {arg=99}{value=23_3}{display=USB Input Device}{enabled=false}{parent=23}
value {arg=99}{value=23_4}{display=HID-compliant mouse}{enabled=false}{parent=23_3}
value {arg=99}{value=23_5}{display=HID-compliant consumer control device}{enabled=false}{parent=23_3}
value {arg=99}{value=23_6}{display=HID-compliant system controller}{enabled=false}{parent=23_3}
value {arg=99}{value=23_7}{display=HID-compliant vendor-defined device}{enabled=false}{parent=23_3}
value {arg=99}{value=23_8}{display=USB Input Device}{enabled=false}{parent=23}
value {arg=99}{value=23_9}{display=HID-compliant vendor-defined device}{enabled=false}{parent=23_8}
value {arg=99}{value=23_10}{display=HID-compliant vendor-defined device}{enabled=false}{parent=23_8}
value {arg=99}{value=23_11}{display=HID-compliant vendor-defined device}{enabled=false}{parent=23_8}
value {arg=99}{value=9}{display=[9] Sierra Wireless USB Composite Device}{enabled=true}
value {arg=99}{value=9_1}{display=Dell Wireless 5809e GobiÔäó 4G LTE Mobile Broadband Card}{enabled=false}{parent=9}
value {arg=99}{value=9_2}{display=SMS_DEVICE2_{E8153BDB-9380-4359-A948-4B1D4C45D67C}}{enabled=false}{parent=9_1}
value {arg=99}{value=9_3}{display=Mobile Broadband Firmware Device}{enabled=false}{parent=9_1}
value {arg=99}{value=20}{display=[20] Generic SuperSpeed USB Hub}{enabled=true}

Regards Jeppe

(09 Sep ‘16, 06:28) Pixelweb
showing 5 of 11 show 6 more comments

One Answer:

0

The issue affects only users who have installed USBPcap (or, possibly, also those who run their own extcap applications) and who have a lot of USB and/or bluetooth devices connected. The behaviour is explained in detail in Bug 12845. If you are affected, you are welcome to help resolve the bug by following the instructions given in the comments to the Question and contribute the information directly to the bugzilla or as another Comment here.

answered 12 Sep '16, 23:58

sindy's gravatar image

sindy
6.0k●4●8●51
accept rate: 24%