Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1650] New: When selecting "use multiple files", file error

Date: Thu, 14 Jun 2007 00:24:18 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1650

           Summary: When selecting "use multiple files", file error occurs
                    when captured data rate is too high.
           Product: Wireshark
           Version: 0.99.5
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pdyk@xxxxxxxxxxxxxxxxxxxx


Build Information:
Version 0.99.5 (SVN Rev 20677)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.7, with GLib 2.12.7, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0
(packet.dll version 4.0.0.755), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804
--
When selecting continious file save option (use multiple files) in options
dialog, will get error "The file "d:\tmp\netcap\test_00002_20070613201634.pcap"
doesn't exist."

I called the file d:\tmp\netcap\test.pcap. 
"Next file every" selected at 1 megabytes. 
"Next file every" minutes not selected.
"Ring buffer with" selected with 3 files.
"Stop capture after" not selected.
All selected in "Display Options".
Nothing selected in "Stop Capture".

I tested this feature while capturing 10Kbytes per second. Everything seems to
work. When I copied a 20Mbyte file onto the computer, when starting the forth
file I received the above message.

This is what was in the directory after the failure:
06/13/07  08:16 PM         1,049,778 test_00001_20070613201614.pcap
06/13/07  08:16 PM         1,049,198 test_00021_20070613201637.pcap
06/13/07  08:16 PM         1,048,864 test_00022_20070613201637.pcap
06/13/07  08:16 PM           581,884 test_00023_20070613201637.pcap

I would really like to leave Wireshark running continiously, but I am getting
this error.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.