On Tue, Nov 12, 2002 at 10:20:04AM -0600, Charlie Shao wrote:
> I installed the latest version of Ethereal software on Windows 2000.
> I can catpure packets and open the output file for examination, but it
> has an error message displayed if the size of the output file is larger
> than 3 MB.
The problem is not necessarily the file size.
The problem might, instead be, that:
1) there's a bug in a dissector in Ethereal, causing a crash;
2) that bug is triggered by a certain type of traffic;
3) your network occasionally has that sort of traffic on it, but
it occurs at a rate such that you have to be capturing
traffic for long enough to get 3MB of traffic in order to
have some of that traffic show up in your capture.
In order to debug that, we'd probably need a copy of one of the capture
files causing the problem. The file is, by default, written to a
temporary file directory; on Windows 2000, that directory will probably
be your personal temporary file directory, which is probably
C:\\Documents and Settings\{your name}\Local Settings\Temp
where "{your name}" is your login name on your machine.
The file will have a name beginning with "etherXXXX".