Wireshark-bugs: [Wireshark-bugs] [Bug 12324] New: Opening a 13MB pcap hangs wireshark, bloats me

Date: Thu, 07 Apr 2016 17:47:38 +0000
Bug ID 12324
Summary Opening a 13MB pcap hangs wireshark, bloats memory to >10GB! for Wireshark.exe and takes ~15 minutes to fully load
Product Wireshark
Version 2.0.2
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Capture file support (libwiretap)
Assignee [email protected]
Reporter [email protected]

Build Information:
Version 2.0.2 (v2.0.2-0-ga16e22e from master-2.0)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.12.16, with Pango 1.36.8,
with
WinPcap (4_1_3), with libz 1.2.8, with GLib 2.42.0, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, with GnuTLS 3.2.15, with Gcrypt 1.6.2, with MIT Kerberos,
with GeoIP, with PortAudio V19-devel (built Feb 26 2016), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale
English_United States.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
Intel(R) Core(TM) i7-4910MQ CPU @ 2.90GHz (with SSE4.2), with 32673MB of
physical memory.


Built using Microsoft Visual C++ 12.0 build 40629

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
I have a 13MB pcap that is taking Wireshark over 15 minutes to open.  In the
process of doing so, it grows the memory for Wireshark.exe to over 10GB.  The
Wireshark UI is mostly frozen while trying to load the pcap.   This happens on
the QT version and GTK version.


You are receiving this mail because:
  • You are watching all bug changes.