Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Out of Memory issue

From: "Kumar, Hemant" <kumarh@xxxxxxxxxxxx>
Date: Thu, 24 Jul 2008 17:12:26 -0700

Hello

 

Hello

 

My dissector runs in to out of memory problem after dissecting certain number of packets.

The maximum size of packet which I am dissecting is 1082KB.

Some of the fields in the packets are buffers which I have added to the display tree also.

It dies out in following TRY statement:--

 

TRY {

        read_packet(cf, dfcode, data_offset);

    }

    CATCH(OutOfMemoryError) {

 

|

|

|

|

    }

    ENDTRY;

  }

 

Any idea or any memory management routine which needs to be implemented in my

Plugin dissector code?

 I read on the link "http://wiki.wireshark.org/KnownBugs/OutOfMemory",

That wireshark should be able to handle data of the order of GBs.

Also without my plugin dll,  the dissector does go smoothly and shows data payload section under UDP and

TCP but with dissection coming in to picture it runs in to this error.

 

Please shed some light on this issue.

 

Thanks

Hemant