Wireshark · Ethereal-dev: Re: [Ethereal-dev] CRITICAL: Ethereal 0.10.10 Locks up Windows XP Solid!

["Idon ." <fehe@xxxxxxxxxxx>]

This bug does not exist in Ethereal 0.10.9, and "Update list of packets in 
real time" works in Ethereal 0.10.9 without locking up the system.  This I 
confirmed yesterday.

I have been running Windows XP SP2 ever since its release.  I was even a 
beta tester for a while.  My system does not get lockups like this.  Also, I 
have been using Winpcap 3.1beta 4 practically since it was released, and 
with various other applications: both those that capture data and those that 
send data.  It has never given me problems.

Therefore, given that I have been operating with these components for 
several monts, problem free, and given that "Update list of packets in real 
time" works in Ethereal 0.10.9 without problems.  Could a developer please 
look into this problem.  Saying it is Winpcap's fault, when one version of 
Ethereal works and the updated version does not, is not very helpful.  Why 
is this a problem with Ethereal 0.10.10?  What changed?

Thanks


Ulf Lamping wrote:

> Well, just because you use a different option in Ethereal, that doesn't
> mean it has to be an Ethereal bug.
>
> Such hard crashes can only be triggered by some ring0 (kernel or driver)
> code. Ethereal itself is running in ring2 (user), it cannot *directly*
> trigger such a bug. It's obvious, that Ethereal finds a way to trigger
> such a case *indirectly*.
>
> Although the way the "Update list of packets in real time" option code
> were recently slightly changed, IMHO this has something to do with it
> (cannot see a good reason, as the things done with WinPcap there weren't
> changed).

> When did you changed to XP-SP2? Possible that this has something to do
> with it?
> Which Ethernet card/driver do you use?
> Could you try a different WinPcap version (e.g. 3.0) and see if the
> problems remain?
>
> Regards, ULFL