Ethereal-users: Re: [Ethereal-users] Ethereal 0.9.7 (Win32) sudden exit

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Mon, 18 Nov 2002 23:36:00 -0800 (PST)
Kirk Schafer said:
> Thanks for developing and supporting this product. While capturing
> packets with Win32 Ethereal 0.9.7, I started to experience sudden
> crashes (lots of disk activity immediately before the program vanishes),
> usually when "stopping" a promiscuous mode capture.

This is probably due to a dissector bug in Ethereal, so that it crashes
when it reads the capture file after the capture is stopped.

There will probably be a capture in your temporary directory, which would
be somewhere under your "profile" directory - which will be a directory
whose name is your login name, under "C:\Documents and Settings"; there
will be some other directory, whose name I don't remember, under your
profile directory, with a name like "temp".  (I'm typing this on MacOS X,
so I can't check what Windows does; as the girl in Jurassic Park said,
"this is UNIX".)

It will have a name beginning with "etherXXXX" or something such as that. 
If you try to read it, Ethereal will probably crash.

If so, we'd either need a stack trace or a copy of the capture file in
order to debug the problem.  (Do *NOT* reply only to me - I don't have
Ethereal on this machine, and don't have time to debug it until some time
after I return from IETF, and it might not be in code that I wrote in any
case; send it to the list.)