Re: Wireshark Crash

[Bill Meier <wmeier () newsguy com>]

On 6/6/2011 3:24 PM, Garcia, Luis Antonio wrote:
> > Details about the crash:error messages/ etc.
>
> I don't really receive any error messages. The program just doesn't
> start up and seems to freeze the system.  I've tried to manually
> debug the situation by running the capture through the Wireshark GUI
> (not tshark) and the program freezes when I try to stop the capture.
> When I try to kill the process through Task Manager, the
> wireshark.exe process does not close.  The only way to end the
> process after the freeze is to reboot the machine.  Normally I would
> run this off of a UNIX machine, but the AirPCap sniffer only runs on
> Windows.

One comment: if you are using tshark initially only to create capture 
files for offline analysis, I suggest using dumpcap instead.

Dumpcap is the program used by tshark to actually do captures and only 
does capturing (no analysis).

Using dumpcap may not resolve the problem, but using dumpcap instead of 
tshark does simplify the process.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe