Wireshark-bugs: [Wireshark-bugs] [Bug 12804] Version 2.0.5 maybe TLS dissector having problems.
Comment # 4
on bug 12804
from Peter Wu
Created attachment 14911 [details]
Output of Massif tool (Wireshark v2.0.5)
I tried to reproduce this on Linux using various tools (Valgrind's Massif and
heaptrack), but the cannot observe the reported 200MB+ memory increase (tested
both v2.0.5[1] and current master with default cmake options).
Steps to reproduce:
# Remove old wireshark profile if any
rm -rf /tmp/wshome
# ensure the file is available at "Recent files"
HOME=/tmp/wshome wireshark -r bad_packet_00003_20160829071957.pcap
# start wireshark
HOME=/tmp/wshome valgrind --tool=massif --time-unit=ms --detailed-freq=1
wireshark
# wait for some (e.g. 10) seconds
# (1) click the pcap in Recent files
# wait for some (e.g. 20) seconds
# (2) close pcap (ctrl-w)
# wait for some (e.g. 5) seconds
# (3) click the pcap in Recent files
# wait for some (e.g. 10) seconds
# (4) close pcap (ctrl-w)
# wait for some (e.g. 5) seconds
# (5) close wireshark (ctrl-q)
For v2.0.5 I observe this "useful-heap" memory usage (with the number X meaning
"measurement before moment (X) in the steps above", attachement is the output
on which this analysis was based):
(1) 39.60MiB (before opening file)
(2) 53.20MiB (file is open; before closing file)
(3) 43.72MiB (before opening file again)
(4) 53.22MiB (file is open; before closing the file again)
(5) 43.73MiB (file is closed; before quitting Wireshark)
(peak heap memory usage was reported to be 57.74MiB and happened while closing
the pcap for the first time.)
Even if the memory allocator on Windows is terrible, it should not result in
that increase.
Can you reproduce this with other capture files? Have you configured a SSL
keylog file which happens to be large?
---
[1] wireshark --version
Wireshark 2.0.5 (Git Rev Unknown from unknown)
Copyright 1998-2016 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.7.0, with libpcap, with POSIX capabilities (Linux),
with libnl 3, with libz 1.2.8, with GLib 2.48.2, without SMI, with c-ares
1.11.0, with Lua 5.2, with GnuTLS 3.4.15, with Gcrypt 1.7.3, with MIT Kerberos,
with GeoIP, with QtMultimedia, without AirPcap.
Running on Linux 4.7.2-1-ARCH, with locale en_GB.UTF-8, with libpcap version
1.7.4, with libz 1.2.8, with GnuTLS 3.4.15, with Gcrypt 1.7.3.
Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz (with SSE4.2)
Built using gcc 6.2.1 20160830.
You are receiving this mail because:
- You are watching all bug changes.
