Wireshark · Ethereal-users: Re: [Ethereal-users] Memory Leak?

["Pia Sahlberg" <piabar@xxxxxxxxxxx>]

Hi,

ethereal as well as tethereal contains some dissectors which needs
to keep state between packets in order to match requests with replies.
This state will add up over time until all memory runs out. :-(

Two common protocols which needs to keep state around are SMB and RPC.
You could disable dissection of SMB, NBSS and RPC which will reduce
the speed at which memory requirements grow.
Better yet :
If you are going to run a long long capture session for a specific protocol, 
first disable all other protocols you dont need
(not easy to do for ethereal :-( )
before you start capturing.


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp