Wireshark-bugs: [Wireshark-bugs] [Bug 12845] First start with non-empty extcap folder after inst

Date: Fri, 09 Sep 2016 09:16:45 +0000

Comment # 11 on bug 12845 from
(In reply to Roland Knall from comment #10)
> (In reply to Pavel Sindelka from comment #9)
> > Repeating the question I've asked Pascal - will it move you further if I use
> > the Process Monitor and tell you what the command line parameters of the
> > zombie instance were?
> 
> It will certainly help, but my guess is, that it hangs with a call to
> "--extcap-interfaces". It will have something to do with gathering the list
> of interfaces or a specific feature for a specific interface.

So I hereby confirm that with the -3 version of USBPcap (uninstall -5, reboot,
manually remove USBPcapCMD.exe from ...\extcap, install -3, reboot, manually
copy USBPcapCMD.exe from ...\USBPcap to ...\extcap) , the behaviour is the
same.

As for the call with --exctap-interfaces, this returns normally (and did return
normally with -5 too) if called from the cmd window, same thing for
USBPcapCMD.exe --extcap-interface IFNAME --extcap-config or ...--extcap-dlts,
see below, and although I never get a prompt until I hit enter, the Task
Manager does not show the USBPcapCMD.exe to continue running after any of the
commands below prints the result.

However, Process Monitor shows that the first call by Wireshark, with
--extcap-interfaces finishes properly, the second one with --extcap-interface
\\.\USBPcap3 --extcap-config as well, but the third one with --extcap-interface
\\.\USBPcap2 --extcap-config is the last one in the log, so it is the one which
makes Wireshark hang. And if you look below at the list of devices it provides
when called from the command line, you'll see tons of items which are
individual Bluetooth services (as the embedded Bluetooth controller of the
laptop is USB based). So I'd guess that the buffer for the list of devices in
Wireshark/dumpcap is not big enough?

This would explain why none of the developers has ever run to that issue. Shall
we ask the two guys who have indicated the issue at ask.wireshark.org to
provide their output of these commands?

I'll attach the log from Process Monitor filtered using "Process Name contains
USBPcapCMD" in a while.

P.


c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interfaces

c:\Program Files\USBPcap>interface {value=\\.\USBPcap1}{display=USBPcap1}
interface {value=\\.\USBPcap2}{display=USBPcap2}
interface {value=\\.\USBPcap3}{display=USBPcap3}

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interface \\.\USBPcap1
--extcap-config

c:\Program Files\USBPcap>arg {number=0}{call=--snaplen}{display=Snapshot
length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535}
arg {number=1}{call=--bufferlen}{display=Capture buffer length}{tooltip=USBPcap
kernel-mode capture buffer length in
bytes}{type=integer}{range=0,134217728}{default=1048576}
arg {number=2}{call=--capture-from-all-devices}{display=Capture from all
devices connected}{tooltip=Capture from all devices connected despite other
options}{type=boolflag}{default=true}
arg {number=3}{call=--capture-from-new-devices}{display=Capture from newly
connected devices}{tooltip=Automatically start capture on all newly connected
devices}{type=boolflag}{default=true}
arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
individual devices to capture from}{type=multicheck}
value {arg=99}{value=1}{display=[1] Generic USB Hub}{enabled=true}
value {arg=99}{value=2}{display=[2] Validity Sensor
(VFS491)}{enabled=true}{parent=1}
value {arg=99}{value=3}{display=[3] Slo┼żen├ę za┼Ö├şzen├ş
USB}{enabled=true}{parent=1}
value {arg=99}{value=3_1}{display=HP HD Webcam
[Fixed]}{enabled=false}{parent=3}

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interface \\.\USBPcap2
--extcap-config

c:\Program Files\USBPcap>arg {number=0}{call=--snaplen}{display=Snapshot
length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535}
arg {number=1}{call=--bufferlen}{display=Capture buffer length}{tooltip=USBPcap
kernel-mode capture buffer length in
bytes}{type=integer}{range=0,134217728}{default=1048576}
arg {number=2}{call=--capture-from-all-devices}{display=Capture from all
devices connected}{tooltip=Capture from all devices connected despite other
options}{type=boolflag}{default=true}
arg {number=3}{call=--capture-from-new-devices}{display=Capture from newly
connected devices}{tooltip=Automatically start capture on all newly connected
devices}{type=boolflag}{default=true}
arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
individual devices to capture from}{type=multicheck}
value {arg=99}{value=1}{display=[1] Generic USB Hub}{enabled=true}
value {arg=99}{value=2}{display=[2] Broadcom 20702 Bluetooth 4.0
Adapter}{enabled=true}{parent=1}
value {arg=99}{value=2_1}{display=Microsoft Bluetooth LE
Enumerator}{enabled=false}{parent=2}
value {arg=99}{value=2_2}{display=Bluetooth Device (RFCOMM Protocol
TDI)}{enabled=false}{parent=2}
value {arg=99}{value=2_3}{display=Microsoft Bluetooth
Enumerator}{enabled=false}{parent=2}
value {arg=99}{value=2_4}{display=Slu┼żba nab├şzen├ş
objektů}{enabled=false}{parent=2_3}
value {arg=99}{value=2_5}{display=Slu┼żba nab├şzen├ş
objektů}{enabled=false}{parent=2_3}
value {arg=99}{value=2_6}{display=Slu┼żba nab├şzen├ş
objektů}{enabled=false}{parent=2_3}
value {arg=99}{value=2_7}{display=Slu┼żba p┼Öenosu soubor┼»
OBEX}{enabled=false}{parent=2_3}
value {arg=99}{value=2_8}{display=Slu┼żba p┼Öenosu soubor┼»
OBEX}{enabled=false}{parent=2_3}
value {arg=99}{value=2_9}{display=Perifern├ş za┼Ö├şzen├ş
Bluetooth}{enabled=false}{parent=2_3}
value {arg=99}{value=2_10}{display=Slu┼żba zdroje
zvuku}{enabled=false}{parent=2_3}
value {arg=99}{value=2_11}{display=Slu┼żba zdroje
zvuku}{enabled=false}{parent=2_3}
value {arg=99}{value=2_12}{display=Slu┼żba zdroje
zvuku}{enabled=false}{parent=2_3}
value {arg=99}{value=2_13}{display=PLT_Legend ÔÇô
stereo}{enabled=false}{parent=2_3}
value {arg=99}{value=2_14}{display=Slu┼żba vzd├ílen├ęho audiovizu├íln├şho
c├şle}{enabled=false}{parent=2_3}
value {arg=99}{value=2_15}{display=Slu┼żba vzd├ílen├ęho audiovizu├íln├şho
c├şle}{enabled=false}{parent=2_3}
value {arg=99}{value=2_16}{display=Slu┼żba vzd├ílen├ęho audiovizu├íln├şho
c├şle}{enabled=false}{parent=2_3}
value {arg=99}{value=2_17}{display=Slu┼żba vzd├ílen├ęho audiovizu├íln├şho
c├şle}{enabled=false}{parent=2_3}
value {arg=99}{value=2_18}{display=đĹđ×đáđśđíđťđÉđĹđśđŤđŁđśđĽ ÔÇô d├ílkov├ę
ovl├íd├ín├ş zvuku nebo videa standardu HID}{enabled=false}{parent=2_3}
value {arg=99}{value=2_19}{display=PLT_Legend ÔÇô d├ílkov├ę ovl├íd├ín├ş zvuku
nebo videa standardu HID}{enabled=false}{parent=2_3}
value {arg=99}{value=2_20}{display=Onetouch Idol 3 ÔÇô d├ílkov├ę ovl├íd├ín├ş
zvuku nebo videa standardu HID}{enabled=false}{parent=2_3}
value {arg=99}{value=2_21}{display=Slu┼żba br├íny zvuku pro sluch├ítka s
mikrofonem}{enabled=false}{parent=2_3}
value {arg=99}{value=2_22}{display=Slu┼żba br├íny zvuku pro sluch├ítka s
mikrofonem}{enabled=false}{parent=2_3}
value {arg=99}{value=2_23}{display=Slu┼żba architektury NAP s├şt─Ť PAN
(Personal Area Network)}{enabled=false}{parent=2_3}
value {arg=99}{value=2_24}{display=Slu┼żba architektury NAP s├şt─Ť PAN
(Personal Area Network)}{enabled=false}{parent=2_3}
value {arg=99}{value=2_25}{display=PLT_Legend Hands-Free Audio and Call Control
HID Enumerator}{enabled=false}{parent=2_3}
value {arg=99}{value=2_26}{display=PLT_Legend
Hands-Free}{enabled=false}{parent=2_25}
value {arg=99}{value=2_27}{display=PLT_Legend ÔÇô za┼Ö├şzen├ş handsfree pro
ovl├íd├ín├ş hovor┼» standardu HID}{enabled=false}{parent=2_25}
value {arg=99}{value=2_28}{display=Slu┼żba br├íny zvuku pro handsfree
soupravu}{enabled=false}{parent=2_3}
value {arg=99}{value=2_29}{display=Slu┼żba br├íny zvuku pro handsfree
soupravu}{enabled=false}{parent=2_3}
value {arg=99}{value=2_30}{display=Za┼Ö├şzen├ş Bluetooth
HID}{enabled=false}{parent=2_3}
value {arg=99}{value=2_31}{display=Slu┼żba p┼Ö├şstupu k SIM
kart─Ť}{enabled=false}{parent=2_3}
value {arg=99}{value=2_32}{display=Slu┼żba p┼Ö├şstupu k SIM
kart─Ť}{enabled=false}{parent=2_3}
value {arg=99}{value=2_33}{display=Slu┼żba p┼Ö├şstupu k telefonn├şmu seznamu
(PSE)}{enabled=false}{parent=2_3}
value {arg=99}{value=2_34}{display=Slu┼żba p┼Ö├şstupu k telefonn├şmu seznamu
(PSE)}{enabled=false}{parent=2_3}
value {arg=99}{value=2_35}{display=MAP SMS/MMS}{enabled=false}{parent=2_3}
value {arg=99}{value=2_36}{display=MAP SMS/MMS}{enabled=false}{parent=2_3}
value {arg=99}{value=2_37}{display=Perifern├ş za┼Ö├şzen├ş
Bluetooth}{enabled=false}{parent=2_3}
value {arg=99}{value=2_38}{display=Perifern├ş za┼Ö├şzen├ş
Bluetooth}{enabled=false}{parent=2_3}
value {arg=99}{value=2_39}{display=Perifern├ş za┼Ö├şzen├ş
Bluetooth}{enabled=false}{parent=2_3}
value {arg=99}{value=2_40}{display=Perifern├ş za┼Ö├şzen├ş
Bluetooth}{enabled=false}{parent=2_3}
value {arg=99}{value=2_41}{display=Dell BT Travel
Mouse}{enabled=false}{parent=2_3}
value
{arg=99}{value=2_42}{display=đĹđ×đáđśđíđťđÉđĹđśđŤđŁđśđĽ}{enabled=false}{parent=2_3}
value {arg=99}{value=2_43}{display=PLT_Legend}{enabled=false}{parent=2_3}
value {arg=99}{value=2_44}{display=Onetouch Idol 3}{enabled=false}{parent=2_3}
value {arg=99}{value=2_45}{display=A511}{enabled=false}{parent=2_3}
value {arg=99}{value=2_46}{display=Bluetooth Device (Personal Area
Network)}{enabled=false}{parent=2}

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interface \\.\USBPcap3
--extcap-config

c:\Program Files\USBPcap>arg {number=0}{call=--snaplen}{display=Snapshot
length}{tooltip=Snapshot length}{type=integer}{range=0,65535}{default=65535}
arg {number=1}{call=--bufferlen}{display=Capture buffer length}{tooltip=USBPcap
kernel-mode capture buffer length in
bytes}{type=integer}{range=0,134217728}{default=1048576}
arg {number=2}{call=--capture-from-all-devices}{display=Capture from all
devices connected}{tooltip=Capture from all devices connected despite other
options}{type=boolflag}{default=true}
arg {number=3}{call=--capture-from-new-devices}{display=Capture from newly
connected devices}{tooltip=Automatically start capture on all newly connected
devices}{type=boolflag}{default=true}
arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
individual devices to capture from}{type=multicheck}
value {arg=99}{value=1}{display=[1] Obecn├Ż rozbo─Źova─Ź USB}{enabled=true}

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interface \\.\USBPcap1
--extcap-dlts

c:\Program Files\USBPcap>dlt {number=249}{name=USBPCAP}{display=USBPcap}

c:\Program Files\USBPcap>USBPcapCMD.exe --extcap-interface \\.\USBPcap2
--extcap-dlts

c:\Program Files\USBPcap>dlt {number=249}{name=USBPCAP}{display=USBPcap}
USBPcapCMD.exe --extcap-interface \\.\USBPcap3 --extcap-dlts

c:\Program Files\USBPcap>dlt {number=249}{name=USBPCAP}{display=USBPcap}


You are receiving this mail because:
  • You are watching all bug changes.