Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3925] Crash while loading a pcap file

Date: Sat, 22 Aug 2009 08:05:18 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3925


Joan Snelders <j.snelders@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |j.snelders@xxxxxxxxxx




--- Comment #1 from Joan Snelders <j.snelders@xxxxxxxxxx>  2009-08-22 08:05:17 PDT ---
Blame the capture file?

Run capinfos en look at the start and end time:

$ capinfos temp.pcap
File name:           temp.pcap
File type:           Wireshark/tcpdump/... - libpcap
File encapsulation:  Ethernet
Number of packets:   100
File size:           11088 bytes
Data size:           9464 bytes
Capture duration:    4153758529 seconds
Start time:          Fri May 18 11:06:15 1973
End time:            Fri Jan 02 07:55:03 2105
Data byte rate:      0.00 bytes/sec
Data bit rate:       0.00 bits/sec
Average packet size: 94.64 bytes
Average packet rate: 0.00 packets/sec


Run TShark to see some of the expert info...(before TShark crashes too)
$ tshark -r temp.pcap -T fields -e expert.message

Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Malformed Packet (Exception occurred)
Connection establish request (SYN): server port 60547
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Connection establish request (SYN): server port 43979
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Malformed Packet (Exception occurred)
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Connection finish (FIN)
Connection reset (RST)
Arrival Time: Fractional second out of range (0-1000000000)
Connection establish request (SYN): server port 27038
Connection reset (RST)
Malformed Packet (Exception occurred)
Arrival Time: Fractional second out of range (0-1000000000)
Arrival Time: Fractional second out of range (0-1000000000)
Malformed Packet (Exception occurred)
Connection reset (RST)


Run TShark and save the first 40 packets:
$ tshark -r temp.pcap -c 40 -w temp40.pcap
I was able to open the temp40.pcap with Wireshark 1.2.1 (SVN Rev 29141)


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.