Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7135] Wireshark crashes during typing capture filter for b

Date: Thu, 3 May 2012 17:07:34 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7135

--- Comment #3 from Evan Huus <eapache@xxxxxxxxx> 2012-05-03 17:07:33 PDT ---
(In reply to comment #2)
> (In reply to comment #1)
> > Hi Ihor,
> > 
> > If you go into the Capture > Options window, and scroll down to the bonded
> > interface, what is in the field "Link-layer header"?
> > 
> > I haven't been able to precisely reproduce this problem, but based on the code
> > I believe that this value isn't getting set correctly.
> > 
> > Thanks,
> > Evan
> 
> Dear Evan,
> 
> I am using the latest version 1.7.1 and 1.7.0 both suffer above mentioned
> issue.
> As You suggested I've had a look at the Link-layer header and it is empty,
> moreover the drop down menu which should allow me to choose from layer types is
> grayed out (non selectable).
> Please advise where to dig.
> 
> Thank You.

What is happening is that Wireshark is not finding any link-layer types for the
bonded interface. Wireshark runs "dumpcap -I -L -i IFACENAME" to find the
link-layer types for a given interface. So there's really two bugs here:

1. Wireshark shouldn't crash when dumpcap returns no link-layer types.
2. Dumpcap should be able to find a link-layer type in the first place.

The first will be fairly trivial to fix, but the second is really the problem,
since you won't be able to capture without a link-layer type, even if I fix the
crash. Time to dive into dumpcap...

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.