Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] While capturing, recvfrom: Bad address

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 23 Aug 2008 13:24:26 -0700

On Aug 22, 2008, at 6:32 PM, JoSH Lehan wrote:

I'm running Wireshark 1.0.2, on 32-bit Fedora 8.

While capturing, this message occasionally appears in a pop-up window,
stopping the capture:


Error while receiving packets: recvfrom: Bad address


When this happens, the capture is forcefully stopped, but Wireshark
remains running.  It does not crash.  If I save my capture, and begin
the capture again, it works.  The error will happen again a short
while later, though.  This can be repeated indefinitely.

This is really more of a wireshark-users than a wireshark-dev question - but it's really a libpcap question, as the recvfrom() getting EFAULT is in libpcap, not Wireshark (Wireshark relies on libpcap/WinPcap for packet capture).

Does it happen if you capture with tcpdump?

What do "dumpcap -v" and "tcpdump -h" print?