I am trying to merge two small .pcap files but as soon as I click 'Open' on the second file, I get a Runtime Error, with no further clue as to the cause of the problem. Wireshark crashes and restarts. This problem has only started today, whereas yesterday I was able to merge files with no problems (in fact today, when I try to re-merge .pcap files that were successfully merged yesterday, I still get the Runtime error, so the source files are fine and not corrupt). I am Running Windows 8.1, 64 bit and Wireshark v2.2.2-0-g775fb08. I have uninstalled and re-installed Wireshark and effected countless reboots but the Runtime Error problem persists. What could I check or change to try and solve this problem? asked 24 Nov '16, 06:41  nigeldom |
2 Answers:
This is probably a bug in Wireshark. Please open a ticket on Bugzilla with the pcaps you are trying to merge attached so that we can reproduce the crash and fix it. answered 24 Nov '16, 06:44  Pascal Quantin edited 24 Nov '16, 06:45 |
mergecap [options] -w <outfile>|- <infile> [<infile> ...] doesn't do it for you? answered 24 Nov '16, 15:22  griff mergecap does work (with the advantage that I can use wildcards on the <infile> list). But I still would like to know what I can check to find out why the GUI is not working properly anymore. If I were to repeat the uninstall, are there any files I could manually remove that are otherwise left behind, so that when I re-install, I have less memory of the previous installation? (25 Nov '16, 04:53) nigeldom You can eventually remove your personal folder found in %APPDATA%\Wireshark (this one is left behind when you uninstall). But please provide feedback in the bug 13175 you filled. Michael asked you yesterday if you have Dell Backup and Recover software installed. (25 Nov '16, 06:27) Pascal Quantin |
OK, will send over two sample files, although one of my team just managed to merge them without any problems. So I suspect the problem is more with my machine and/or installation, rather than being a problem with the files. Therefore I don't believe you'll be able to reproduce my fault without some extra information - but I don't know what to look for and where.