Hello! Since Wireshark Version 2.x.x it is impossible to open more than one pcap File. If one pcap file is already openend and I try to open a further one, I got an error message (from Wireshark Portable PortableApps.com Launcher) that one instance of wireshark is still running and that I should close all instances. What can I do that I can open more than one pcap file? At present I still use Wireshark Portable Version 1.12.8. to avoid this problem. Best regards Andreas asked 09 Sep '16, 00:15  Boettcher |
One Answer:
Hi Andreas, as far as I know this is a limitation of the PortableApps.com launcher, not from Wireshark (done on purpose if I remember properly to handle the registry redirection). Wireshark 1.12 was built with an older version of PA.com Launcher that was not doing this check. answered 09 Sep '16, 08:23  Pascal Quantin |
According to the PA.c documentation this should work by default, but it looks like we have to set the [Launch]SingleAppInstance key: https://code.wireshark.org/review/#/c/17616