Ethereal-users: Re: [Ethereal-users] Memory leak with 0.10.13 "-R" option

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 13 Feb 2006 10:14:04 +0100
Sadin Nurkic wrote:
How exactly do you turn off the stateful-ness?
There is no "one and only" Preference setting for this.

Some good candidates to save a lot of memory are:

IP/Reassembled fragmented IP datagrams
TCP/Allow subdissectors to reassemble TCP streams

Don't forget to press the "Save" button :-)

Be aware that these features are probably required to detect the packets properly that you want to capture. So maybe you miss packets that are missinterpreted.

You can check this "off line", by loading a capture file, setting a display filter (gtp when I remember correct) and see if the number of displayed packets are the same with and without the Settings. You may need to reload the file after changing the Settings.
GLib-ERROR **: could not allocate 10485760 bytes
aborting...
Aborted
Yes, that's the usual message when Ethereal runs out of memory. It's a known bug.

Regards, ULFL