Wireshark-bugs: [Wireshark-bugs] [Bug 8721] New: -z icmp, srt stalls intermittently
Date: Mon, 27 May 2013 00:51:02 +0000
Bug ID 8721
Summary -z icmp,srt stalls intermittently
Classification Unclassified
Product Wireshark
Version 1.10.0
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Minor
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter skendric@fhcrc.org

Created attachment 10849 [details]
A small slice of the large ping trace -- -qz icmp,srt works on this

Build Information:
1.10.0rc2 (SVN Rev 49526 from /trunk-1.10)
Windows 7 64bit
--
I'm using the following to calculate various ICMP stats:

tshark -r ping.pcap -qz icmp,srt

On some trace files, this works:

tshark -r pings-small.pcap -qz icmp,srt

==========================================================================
ICMP Service Response Time (SRT) Statistics (all times in ms):
Filter: <none>

Requests  Replies   Lost      % Loss
1912      1912      0           0.0%

Minimum   Maximum   Mean      Median    SDeviation     Min Frame Max Frame
0.004     204.820   5.819     0.257     26.795         2492      2812
==========================================================================

tshark -r pings-middle.pcap -qz icmp,srt
==========================================================================
ICMP Service Response Time (SRT) Statistics (all times in ms):
Filter: <none>

Requests  Replies   Lost      % Loss
224579    224520    59          0.0%

Minimum   Maximum   Mean      Median    SDeviation     Min Frame Max Frame
0.003     378.488   5.209     0.297     25.004         27214     171499    
==========================================================================
[This requires ~18 minutes on my machine.]


And other times it does not:
tshark -r pings-big.pcap -qz icmp,srt
[This has been running for almost 5 hours on my machine and still hasn't
completed -- one of the cores on my CPU is pegged.]

pings-small.pcap and pings-middle.pcap are both slices taken from
pings-big.pcap

At the moment, I propose that size matters -- the larger the trace file, the
less likely it is to complete.

The traces files are visible at:  https://vishnu.fhcrc.org/wireshark

I shall attempt to upload them as well.

--sk


You are receiving this mail because:
  • You are watching all bug changes.