Ethereal-users: Re: [Ethereal-users] error on Win2000

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: aferen@xxxxxxxxxxxx (Andrew C. Feren)
Date: 20 Sep 2001 17:32:18 -0400
Guy Harris <guy@xxxxxxxxxx> writes:

> > I got the following, hopelessly vague, error message the other day on
> > a Win2000 box.  (To be fair the message does not seem to be coming
> > from ethereal directly.
> 
> It isn't.  It's generated by some part of W2K, as far as I know -
> perhaps by the Win32 subsystem process.

As I suspected.

> I'm curious whether
> 
> > ethereal.exe has generated errors and will be closed by windows.
> 
> is Windows 2000's more "user friendly" form of the dialog box that
> earlier versions of NT used when a program got an unhandled exception -
> e.g., if it dereferenced a null pointer.

I think this is the case.  After I sent my original question I got the
following from the user having the problem.

        Installed NT 4.0 on the same hardware and got the following error.
        Exception: divide by zero (0xc0000094), address: (0x007db7a0)

I'm not sure what to make of this other than to assume some flakey
hardware or Windows flakeyness (as hard as that may be to belive).
Even later in the day a new PC was scrounged up (running 2000) and
Ethereal worked.  As far as I know the new PC was hardware identical.
The user swapped PCs and my problem went away for now.

[ snip ]

> > Any idea where this error log was created?
> 
> Try opening the Event Viewer (pop up the Start menu, go to Programs, go
> to Administrative Tools, and go to Event Viewer - you might have to
> click on the "please show me the whole damn menu" arrows to get that),
> select the Application Log, and look for messages the source of which is
> "DrWatson".
> 
> I have, for example, one of those in my message log saying, in the
> Description field:
> 
> 	The application, netsc_us.exe, generated an application error
> 	The error occurred on 01/11/2001 @ 20:54:42.742 The exception
> 	generated was c0000005 at address 00441163
> 	(lo_FreeDocumentEmbedListData)
> 
> (ooh, *quelle surprise*, Netscape dumped core!  Gosh, that almost
> *never* happens...).
> 
> The "View" menu in the Event Viewer has a "Filter" item; you can choose
> "DrWatson" in the "Event source:" combo box, and it'll limit the display
> to messages from Dr. Watson.

Thanks.  This will give me something to try in the future when the new
owner of the original PC wants to run Ethereal.  ;-)


-- 
-Andrew Feren
 Cetacean Networks, Inc.
 Portsmouth, NH