[Gerald Combs <gerald@xxxxxxxx>]

On Thu, 22 Jun 2000, Christine Tran wrote:

> Ethereal core dumps on bus error when I hand it a snoop cature file
> greater than 5K packets.  I have a quite hefty machine with 1/2 GB memory that's
> very lightly loaded, no reason why it should choke like this.  I can start throwing
> away the data and keep only the headers, but the box I'm trying to profile clocks
> 15K+ packets per second, what I capture will still be quite large.
> 
> Is this normal? Can I fix it?  (i.e. run w/ option or recompile from source 
`> with allowance for larger data size?)

On RISC hardware, a bus error usually indicates an alignment problem in
one of the dissectors.  Would it be possible to print a stack trace using
a debugger, and send the output to the ethereal-dev mailing list?  
Ethereal's README file has example of using gdb to do this:

$ gdb ethereal core
(gdb) backtrace
..... prints the stack trace
(gdb) quit
$