Wireshark · Ethereal-dev: Re: [ethereal-dev] smb lanman core dump

[Guy Harris <guy@xxxxxxxxxx>]

> OK...I didn't even know it generated trace files...

When Ethereal is doing a packet capture, it writes the captured packets
to a file; when you hit the "Stop" button, it closes the capture file
and reads it in, as it would read in a file whose pathname was supplied
on the command line or in the "File:Open" dialog box.  (The "Update list
of packets in real time" stuff reads, instead, from the capture file as
it's being written.)

> Here's a trace which core dumps on redhat 6.0...

It didn't drop core when I tried it on an RH 6.0 system here, with
Ethereal 0.7.9.  There may be more to it....