Ethereal-users: Re: [Ethereal-users] Ethereal crashes

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 3 Feb 2003 13:36:20 -0800
On Sat, Feb 01, 2003 at 08:36:40PM -0500, Charles Elliott wrote:
> I tried to use both Ethereal and Tethereal to
> capture the TCP traffic so I could see what was wrong.  Tethereal worked
> well on the slaves, but Ethereal bombed out every time; I am not sure why,
> but the file generated was always corrupted and unreadable after only a few
> seconds.

"Corrupted and unreadable" in what sense?  Can tcpdump or Tethereal read
it?

> 	When the master is receiving results it gets hundreds of packets every few
> seconds.  Ethereal crashed immediately when run on the master every time.
> However, Tethereal would run for a few seconds and then crash with a stack
> overflow error.

It appears that the data structure keeping track of which tvbuffs
(internal buffers for packet data) are used by which other tvbuffs has
gotten corrupted; without a capture file that reproduces the problem
(i.e., read the capture file in Ethereal or Tethereal), it might be
difficult to find what causes it.