Wireshark-dev: Re: [Wireshark-dev] One quick question
From: Paul Offord <[email protected]>
Date: Mon, 29 Jan 2018 09:25:31 +0000

Hi Krishnamurthy,


Wireshark uses an executable called dumpcap to perform the actual capture.  You can use dumpcap directly from the command line, and as dumpcap doesn’t build the structures that Wireshark builds you won’t have a memory problem.  You can then view the resulting pcapng file with Wireshark in the normal way.


You can find more information here - https://community.tribelab.com/course/view.php?id=10 – including a video explaining the use of dumpcap.


Best regards…Paul


From: Wireshark-dev [mailto:[email protected]] On Behalf Of Krishnamurthy Mayya
Sent: 29 January 2018 09:21
To: Developer support list for Wireshark <[email protected]>; [email protected]
Subject: Re: [Wireshark-dev] One quick question



So, If I am sending continuos stream of data at the line rate(1gb/s) and if I am using wireshark to capture the content, it will crash after sometime

due to memory exhaustion. Is there any way to bypass this ? (Any free function/some other work around)

Any suggestion from your side would be extremely helpful. Thanks in advcane



Krishnamurthy mayya



On Mon, Jan 8, 2018 at 11:05 PM, Guy Harris <[email protected]> wrote:

On Jan 8, 2018, at 5:29 AM, Krishnamurthy Mayya <[email protected]> wrote:

> epan_get_frame_ts
> Like the above function, is there any utility function in wireshark which fress the memory allocated for the given frame_num ?

Are you assuming that epan_get_frame_ts() returns a pointer to a freshly-allocated structure that must be freed when the caller no longer needs it?

If so, no, it doesn't.  You do not need to free the structure.
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe



This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

Any views or opinions expressed are solely those of the author and do not necessarily represent those of Advance Seven Ltd. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission.

Advance Seven Ltd. Registered in England & Wales numbered 2373877 at Endeavour House, Coopers End Lane, Stansted, Essex CM24 1SJ

This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com