Wireshark · Ethereal-dev: Re: [Ethereal-dev] Stop capture after [size] broken?

[Ulf Lamping <ulf.lamping@xxxxxx>]

Nicoson Dave wrote:

> I'm using 0.10.4 on Windows 2000 with GTK+ 2.2.4 (Glib 2.2.3) and winpcap 3.0.  It looks like the "Stop after [filesize]" feature has a bug.  The number of bytes for the filesize is computed correctly according to the factors kilobytes, megabytes, and gigabytes.  However, when I start a second capture, Ethereal keeps the multiplying factor and also inserts the total number of bytes computed for the last run.  So we get the factor twice.
>
> Entered   Next time get
> 1k       1024k
> 2k       2048M
> 3M       3145728M
> 9M       9437184M
> 1M       1048576M
> 10M      10485760M
> 100M     104857600M  
>
> Resulting in lots of this error:
>
> Stop Capture: Requested filesize too large!
>
> The setting "... after x byte(s)" can't be greater than 2147483647 bytes (2GB).
>
> Can anyone confirm? 
> I apologize if this is already well-known.
>  
This wasn't well known, thank you for your bug report!

I've checked in a fix for this, so if the dialog is reopened again, it 
will try to find the correct unit corresponding to the value and adjust 
the value corresponding.

Regards, ULFL