[Bob Evans <bob.evans@xxxxxxxx>]

On MontaVista 3.0 Linux I consistently get the following crash ONLY when 
the capture rate is very high, like 1000 packets per seconds.
If I apply some filtering and/or move to another less-busy interface, 
the crash does not occur and the packet capture continues accumulating 
way beyond the high-rate run (by looking at the sizes on the 
/tmp/etherXXX files created).  So it is not the size of the capture, but 
the rate.  If I run on the busy interface and quickly (like immediately) 
stop the capture, the crash does not occur.
I have not modified the 0.10.6 code for this test.
Bob.

Program received signal SIGSEGV, Segmentation fault.
0x40eb6112 in dissect_asn1 (tvb=0x8320e5c, pinfo=0x864f1d0, tree=0x0) at 
packet-asn1.c:816
816             proto_tree_add_item_hidden(tree2, ((PDUinfo 
*)PDUtree->data)->value_id, tvb, boffset,
(gdb) bt
#0  0x40eb6112 in dissect_asn1 (tvb=0x8320e5c, pinfo=0x864f1d0, 
tree=0x0) at packet-asn1.c:816
#1  0x4018e26f in call_dissector_through_handle (handle=0x8278b18, 
tvb=0x8320e5c, pinfo=0x864f1d0,
   tree=0x0) at packet.c:363
#2  0x4018e648 in call_dissector_work (handle=0x8278b18, tvb=0x8320e5c, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:513
#3  0x4018eb2d in dissector_try_port (sub_dissectors=0x824cd18, 
port=801, tvb=0x8320e5c,
   pinfo=0x864f1d0, tree=0x0) at packet.c:776
#4  0x405b469a in decode_tcp_ports (tvb=0x8320e28, offset=32, 
pinfo=0x864f1d0, tree=0x0, src_port=801,
   dst_port=32775) at packet-tcp.c:2381
#5  0x405b4929 in process_tcp_payload (tvb=0x8320e28, offset=32, 
pinfo=0x864f1d0, tree=0x0,
   tcp_tree=0x0, src_port=801, dst_port=32775, seq=1, nxtseq=77, 
is_tcp_segment=1) at packet-tcp.c:2428
#6  0x405b4b10 in dissect_tcp_payload (tvb=0x8320e28, pinfo=0x864f1d0, 
offset=32, seq=1, nxtseq=77,
   sport=801, dport=32775, tree=0x0, tcp_tree=0x0) at packet-tcp.c:2508
#7  0x405b617d in dissect_tcp (tvb=0x8320e28, pinfo=0x864f1d0, tree=0x0) 
at packet-tcp.c:2915
#8  0x4018e26f in call_dissector_through_handle (handle=0x8275990, 
tvb=0x8320e28, pinfo=0x864f1d0,
   tree=0x0) at packet.c:363
#9  0x4018e648 in call_dissector_work (handle=0x8275990, tvb=0x8320e28, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:513
#10 0x4018eb2d in dissector_try_port (sub_dissectors=0x81fcb58, port=6, 
tvb=0x8320e28, pinfo=0x864f1d0,
   tree=0x0) at packet.c:776
#11 0x403dc247 in dissect_ip (tvb=0x8320df4, pinfo=0x864f1d0, tree=0x0) 
at packet-ip.c:1098
#12 0x4018e26f in call_dissector_through_handle (handle=0x81fcc78, 
tvb=0x8320df4, pinfo=0x864f1d0,
   tree=0x0) at packet.c:363
#13 0x4018e648 in call_dissector_work (handle=0x81fcc78, tvb=0x8320df4, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:513
#14 0x4018eb2d in dissector_try_port (sub_dissectors=0x81e2040, 
port=2048, tvb=0x8320df4,
   pinfo=0x864f1d0, tree=0x0) at packet.c:776
#15 0x403102aa in ethertype (etype=2048, tvb=0x8320dc0, 
offset_after_etype=14, pinfo=0x864f1d0,
   tree=0x0, fh_tree=0x0, etype_id=3602, trailer_id=3604, fcs_len=-1) 
at packet-ethertype.c:179
#16 0x4030fa00 in dissect_eth_common (tvb=0x8320dc0, pinfo=0x864f1d0, 
tree=0x0, fcs_len=-1)
   at packet-eth.c:292
#17 0x4030fbe9 in dissect_eth_maybefcs (tvb=0x8320dc0, pinfo=0x864f1d0, 
tree=0x0) at packet-eth.c:387
#18 0x4018e26f in call_dissector_through_handle (handle=0x826d6d8, 
tvb=0x8320dc0, pinfo=0x864f1d0,
   tree=0x0) at packet.c:363
---Type <return> to continue, or q <return> to quit---
#19 0x4018e648 in call_dissector_work (handle=0x826d6d8, tvb=0x8320dc0, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:513
#20 0x4018eb2d in dissector_try_port (sub_dissectors=0x81dfcc8, port=1, 
tvb=0x8320dc0, pinfo=0x864f1d0,
   tree=0x0) at packet.c:776
#21 0x40338794 in dissect_frame (tvb=0x8320dc0, pinfo=0x864f1d0, 
tree=0x0) at packet-frame.c:184
#22 0x4018e26f in call_dissector_through_handle (handle=0x81efcc8, 
tvb=0x8320dc0, pinfo=0x864f1d0,
   tree=0x0) at packet.c:363
#23 0x4018e648 in call_dissector_work (handle=0x81efcc8, tvb=0x8320dc0, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:513
#24 0x40190062 in call_dissector (handle=0x81efcc8, tvb=0x8320dc0, 
pinfo=0x864f1d0, tree=0x0)
   at packet.c:1614
#25 0x4018e0ef in dissect_packet (edt=0x864f1c8, 
pseudo_header=0x8320c3c, pd=0x83b58e8 "", fd=0x86a9f48,
   cinfo=0x818a30c) at packet.c:311
#26 0x4018b6cd in epan_dissect_run (edt=0x864f1c8, 
pseudo_header=0x8320c3c, data=0x83b58e8 "",
   fd=0x86a9f48, cinfo=0x818a30c) at epan.c:153
#27 0x08069a8a in add_packet_to_packet_list (fdata=0x86a9f48, 
cf=0x817a1e0, pseudo_header=0x8320c3c,
   buf=0x83b58e8 "", refilter=1) at file.c:810
#28 0x08069e84 in read_packet (cf=0x817a1e0, offset=7781900) at file.c:956
#29 0x08069636 in cf_continue_tail (cf=0x817a1e0, to_read=773, 
err=0xbfffcecc) at file.c:572
#30 0x08065520 in sync_pipe_input_cb (source=10, user_data=0x817a1e0) at 
capture.c:772
#31 0x080a45af in pipe_input_cb (data=0x8176020, source=10, 
condition=GDK_INPUT_READ) at ui_util.c:672
#32 0x40be443e in gdk_io_invoke (source=0x0, condition=0, 
data=0x8326b88) at gdkevents.c:882
#33 0x40c1d7cc in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#34 0x40c1eee9 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#35 0x40c1f3aa in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#36 0x40c1f618 in g_main_run () from /usr/lib/libglib-1.2.so.0
#37 0x40b209d3 in gtk_main () at gtkmain.c:524
#38 0x08085d26 in main (argc=0, argv=0xbfffe370) at main.c:2546
#39 0x40d6272e in __libc_start_main (main=0x8084454 <main>, argc=3, 
ubp_av=0xbfffe364,
   init=0x805bcc4 <_init>, fini=0x40015e0c <_dl_debug_mask>, 
rtld_fini=0x40eb6043 <dissect_asn1+1267>,
   stack_end=0x0) at ../sysdeps/generic/libc-start.c:129
(gdb)





------------------------------------------------------------------------
Confidentiality Notice:   This e-mail transmission may contain
confidential and/or privileged information that is intended only for the
individual or entity named in the e-mail address. If you are not the
intended recipient, you are hereby notified that any disclosure,
copying, distribution or reliance upon the contents of this e-mail
message is strictly prohibited. If you have received this e-mail
transmission in error, please reply to the sender, so that proper
delivery can be arranged, and please delete the message from your
computer.  Thank you.
Inet Technologies, Inc.
------------------------------------------------------------------------