Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 1650] New: When selecting "use multiple files", file error occurs when captured data rate is too high.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 14 Jun 2007 00:24:18 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1650

           Summary: When selecting "use multiple files", file error occurs
                    when captured data rate is too high.
           Product: Wireshark
           Version: 0.99.5
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pdyk@xxxxxxxxxxxxxxxxxxxx


Build Information:
Version 0.99.5 (SVN Rev 20677)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.7, with GLib 2.12.7, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0
(packet.dll version 4.0.0.755), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804
--
When selecting continious file save option (use multiple files) in options
dialog, will get error "The file "d:\tmp\netcap\test_00002_20070613201634.pcap"
doesn't exist."

I called the file d:\tmp\netcap\test.pcap. 
"Next file every" selected at 1 megabytes. 
"Next file every" minutes not selected.
"Ring buffer with" selected with 3 files.
"Stop capture after" not selected.
All selected in "Display Options".
Nothing selected in "Stop Capture".

I tested this feature while capturing 10Kbytes per second. Everything seems to
work. When I copied a 20Mbyte file onto the computer, when starting the forth
file I received the above message.

This is what was in the directory after the failure:
06/13/07  08:16 PM         1,049,778 test_00001_20070613201614.pcap
06/13/07  08:16 PM         1,049,198 test_00021_20070613201637.pcap
06/13/07  08:16 PM         1,048,864 test_00022_20070613201637.pcap
06/13/07  08:16 PM           581,884 test_00023_20070613201637.pcap

I would really like to leave Wireshark running continiously, but I am getting
this error.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

  • Follow-Ups:
    • [Wireshark-bugs] [Bug 1650] When selecting "use multiple files", file error occurs when captured data rate is too high.
      • From: bugzilla-daemon
    • [Wireshark-bugs] [Bug 1650] When selecting "use multiple files", file error occurs when captured data rate is too high.
      • From: bugzilla-daemon
  • Prev by Date: [Wireshark-bugs] [Bug 1620] decode Vendor-Id AVP and Session-Id AVP wrong
  • Next by Date: [Wireshark-bugs] [Bug 1650] When selecting "use multiple files", file error occurs when captured data rate is too high.
  • Previous by thread: [Wireshark-bugs] [Bug 1430] EtherCAT dissector
  • Next by thread: [Wireshark-bugs] [Bug 1650] When selecting "use multiple files", file error occurs when captured data rate is too high.
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation