Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6259] Decoding RTP crashes wireshark

Date: Mon, 19 Sep 2011 14:06:25 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6259

--- Comment #3 from Bill Meier <wmeier@xxxxxxxxxxx> 2011-09-19 17:06:24 EDT ---
(In reply to comment #0)
> Telephony > Voip Calls
> Click on stream
> Click Player
> Click Decode
> Bang, Wireshark crashes every time.
> 
> 
> The pcap file is 15mb though.  How can I get the file to you for debugging?

A (somewhat tedious) way to try to get a file of manageable size which contains
the frame(s) which crash(es) wireshark. 

Try bisecting the file a few times using editcap and testing each half after
each bisection to see if the error occurs.

If you're lucky you'll be able to localize the error to a file of manageable
size which can be attached to this bug.

The commands (from the command line which I assume is possible on your MAC):

1. Use capinfos <filename> to find out how many packets in the file

2. Use editcap -r m-n   <infile> <outfile> to create <outfile> containing
   frames m thu n of the input file.

   <test> <outfile>

   <repeat>

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.