Ethereal-users: Re: [Ethereal-users] Ethereal 0.8.14 locks up on "large" captures .

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Mon, 8 Jan 2001 21:21:47 -0600
On Mon, 8 Jan 2001 20:28:49 -0600
"McNutt, Justin M." <McNuttJ@xxxxxxxxxxxx> wrote:

> I attemped this, but no core file was produced.  Ethereal most certainly
> hangs, though, about halfway through the packet decode.
> 
> I have saved the capture file, in case that will help.  It's a little over
> 5MB, though, so I'd prefer not to send it through e-mail.
> 


I got the file, thanks. It had exactly 10,000 frames in it. It worked just fine,
using the current CVS version of Ethereal. There was a *big* difference of load
times between enabling and disabling name lookups. But at no time did
Ethereal/tethereal hang or crash.

I ran "time tethereal -r mcnutt.cap" and it took 10 minutes for the whole file
to print out to my screen.

I then ran "time tethereal -n -r mcnutt.cap", where the "-n" disables name
lookups, and it took only 6.9 seconds for the whole file to be processed
and print to my screen.

If you disable name lookups (either via command-line or via GUI), does
Ethereal hang?

--gilbert