ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] While capturing, recvfrom: Bad address

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 23 Aug 2008 13:24:26 -0700

On Aug 22, 2008, at 6:32 PM, JoSH Lehan wrote:

I'm running Wireshark 1.0.2, on 32-bit Fedora 8.

While capturing, this message occasionally appears in a pop-up window,
stopping the capture:


Error while receiving packets: recvfrom: Bad address


When this happens, the capture is forcefully stopped, but Wireshark
remains running.  It does not crash.  If I save my capture, and begin
the capture again, it works.  The error will happen again a short
while later, though.  This can be repeated indefinitely.

This is really more of a wireshark-users than a wireshark-dev question - but it's really a libpcap question, as the recvfrom() getting EFAULT is in libpcap, not Wireshark (Wireshark relies on libpcap/WinPcap for packet capture).

Does it happen if you capture with tcpdump?

What do "dumpcap -v" and "tcpdump -h" print?