Ethereal-users: Re: [Ethereal-users] Problems loading files captured with windump

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Wed, 11 Oct 2000 09:38:08 -0700
On Wed, Oct 11, 2000 at 04:27:33PM +0200, Schilling, Johannes wrote:
> I use ethereal with my Win NT PC. Since Version 0.8.12 I have problems to
> load a capture file which was captured with windump. Dr. Watson comes up
> with the following message:

As Gilbert noted, the message wasn't in your message.

However, the message probably means that Ethereal dereferenced a bad
pointer, which means it may not tell us much.

> Is there a way to load these files with Version 0.8.12?

The problem probably isn't with loading capture files captured with
WinDump (WinDump is just a port of tcpdump to Windows, which means it
uses the libpcap capture file format, which is also the native capture
file format of Ethereal), it's probably a problem with *certain* capture
files, which would probably blow up just as well if they were captured
with some other program (tcpdump on UNIX, etc.).

I.e., it's probably a problem with one of Ethereal's dissectors; without
a stack trace, we have no way of knowing which dissector.  Could you
send us one of the capture files that cause Ethereal to crash?