http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2228
--- Comment #17 from Bill Meier <wmeier@xxxxxxxxxxx> 2008-03-24 13:09:20 GMT ---
> But do I understand correctly that wireshark will try another time to kill
> dumpcap and succeed at some point?
Not exactly: If dumpcap were somehow to hang before doing the pcap_open and
then dropping the capabilities, it might be necessary to exit the (parent)
wrireshark to kill the (child) dumpcap.
> I think if capabilities are not required any more it's good idea to drop
> them in any case, don't it?
I completely agree; The only concern I had was the small window during which a
signal from wireshark to dumpcap will fail. Since a dumpcap hang during this
window is unlikely, and since I believe exiting wireshark should kill any such
hung child process, I think the current code is OK.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.