Wireshark · Ethereal-dev: Re: [Ethereal-dev] 0.9.15/Win32 closes program on close of conversation window

[Guy Harris <guy@xxxxxxxxxxxx>]

On Sep 17, 2003, at 6:19 AM, Ph. Marek wrote:

> It works basically, but sometimes (about 50%) on closing the 
> conversations
> window, without questioning me if I want to save my (unsaved) data.

Well, Ethereal never questions whether to save unsaved data, even if 
it's exiting cleanly - and it's probably just crashing in this case.

Is there any message from Windows about a crash?  (What version of 
Windows is this?)

I have, on occasion, seen GTK+ messages printed to the terminal window 
from which I've run it on UNIX; I don't know if those are the same 
underlying problem or not.

> That happened (so far) with the windows for ipv4, tcp, udp and 
> ethernet, but
> (as far as i know) only for *unsaved* data. (that is, in the few cases 
> where
> I saved my short capture before analyzing it didn't crash).

The main difference saving the capture makes is that the capture is in 
a permanent file rather than a temporary file (which means that your 
data probably isn't lost - it's probably in C:\temp or in whatever the 
per-user temporary file directory is in W2K and later, in a file whose 
name begins with "ether" and has a bunch of letters and numbers after 
that); I'm not sure why that'd make a difference, but perhaps it does.