[Chris Waters <chris.waters@xxxxxxxxxxxxxxxxxxxx>]

Hi,

 

It is possible that a error is occuring inside one of the packet dissectors. Can you use another packet sniffer to capture packets at the same time and identify the packet after the last one that Ethereal successfully displays?

 

To confirm that the error is in the Ethereal packet dissection code you could save the packet trace from the other program and then open it with Ethereal. Ethereal should crash in the same place.

 

Instead of using a different program to make the other capture, you might be able to do it with Ethereal as well. Within Ethereal, use the Protocols dialog to disable all protocols and make a capture.

 

If you do manage to narrow the problem down to a saved capture or packet, please post it here or on the EtherealDev list so that it can be fixed.

Regards,

 

Chris.

----- Original Message -----

From: Greg McElheney

To: 'ethereal-users@xxxxxxxxxxxx'

Sent: Friday, November 08, 2002 4:26 PM

Subject: [Ethereal-users] Windows 2000

On a Windows 2000 SP3 machine with a 3COM NIC -

 

Using winpcap 2.3 and ethereal 0.9.7 while capturing packets I get a Windows error message saying that Ethereal.exe has generated errors and will be shut down.

 

I'm not able to pinpoint the exact cause, other than if I capture more than 15-20 packets.

 

Thanks in advance for any help.

 

 

Greg McElheney, MCSE Information Technology Western National Group 949.862.6257 www.wng.com