Ethereal-users: Re: [ethereal-users] Re: [ethereal-dev] static vs dynamic column width

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Tue, 27 Jul 1999 16:55:06 -0500
On Tue, Jul 27, 1999 at 04:27:42PM -0500, Guy Harris wrote:
> 
> 
> > > btw, I get occasional crashes and dumps when running with -S, usually
> > > happening while I am not looking at the screen.  Is there any useful
> > > information I could provide about this?
> >
> > Yes, any core stacks would be greatly appreciated.
> 
> I've seen "ethereal -S" crash as a result of the capture file it's
> trying to read apparently not having a full packet at the end:
> 
>         tooting# ./ethereal -S
> 
>         ** ERROR **: pcap_read: not enough packet header data (14 bytes)
>         aborting...
>         Abort (core dumped)

That of course is from the pcap read routine in wiretap.

Guy Scharf: when you experienced core dumps with -S, are you using ethereal
0.6.3, or the CVS tree? If with 0.6.3, do you have wiretap compiled in?
(you would have had to configure via: "./configure --with-wiretap")
 
> I've seen it on Solaris 2.5.1 at work, and on Solaris 2.6 at work, but
> not Solaris 7 or any other OS at home; this may have more to do with the
> levels of traffic at work and home (i.e., lots at work, little at home
> when I'm doing the testing) than with the OSes in question.

Probably so.

> When I looked at the code, it looked as if it *should* work - i.e., the
> "fflush()" of the capture file should happen only after a packet had
> been written to the stream - so I'm presumably missing something.

--gilbert