Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Crash in Ethereal 0.10.3

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Sat, 8 May 2004 18:15:34 +0200
Hans Persson wrote:
> I just installed Ethereal 0.10.3 on a freshly installed Windows XP
> machine (together with Winpcap 3.0, but got the same result with the
> beta that was available).
>
> What happens is that when I click a SIP packet after making a capture,
> Ethereal crashes. Other types of packets can be clicked without any
> problems. I have now downgraded to 0.10.0 and have no problems there.
>

There is a problem with SIP-dissector in 0.10.3 that has been solved in cvs
version. The problem was introduced shortly before 0.10.3 released and fixed
some days later.

I know you can get a crash when you select a SIP packet if at least one of
the conditions below is true:
-The SIP packet is sent over TCP
-The SIP packet is not sent to/from UDP port 5060 (either source port or
destination port needs to be 5060 otherwise you may get the crash)
-The preference setting "Try heuristic dissectors first" for UDP is enabled
(Edit/Preferences/Protcols/SIP)

http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html

> Another thing is that 0.10.0 chooses my wireline interface (which is
> active) to capture from, while 0.10.3 consistently chooses my wireless
> interface (which is disabled). This has an obvious workaround, but is
> still annoying.
>

It should be possible to define the default interface in the preference
settings,
Edit/Preferences/Capture/Default interface + Save
Try that.