Wireshark-bugs: [Wireshark-bugs] [Bug 6755] slow loading/processing of conversations with over 5
Date: Fri, 27 Jan 2012 02:44:19 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6755

--- Comment #15 from Andreas Heise <andreas.heise@xxxxxxxxxxxxx> 2012-01-27 02:44:19 PST ---
(In reply to comment #14)
> (In reply to comment #10)
> > Created attachment 7736 [details]
> > screenshoot of problem with the patch
> > 
> > when I apply the patch to SVN 40488 then wireshark (libwireshark.dll) crash 
> > during load of some SIP-TLS captures, attached is a 
> > screenshoot. Problem does not occur with a SIP-TLS 
> > captures. If I revert the patch, all is fine.
> > I'll try to find a unconfidential pcap to provide it for analyse
> > 
> > tested with XP 32bit
> 
> cristian: pls. either:
> 
> 1. provide a capture that produces this problem
> 2. run it on a linux/unix machine and send me a backtrace from
> the coredump.
> 
> a. to produce the coredump, make sure you did:
> ulimit -c unlimited
> before running patched wireshark
> 
> b. to get the backtrace use gdb on the coredump like this:
> gdb .libs/lt-wireshark core
> and then under the gdb prompt use "bt" to get the trace.
> 
> (on some systems the cores are dumped with pre-configured names,
> spec'ed in: /proc/sys/kernel/core_pattern)

Hi Cristian,

some more details about the crash: 

it happens on "tcp port number reused" means same IPs:ports, but new tcp
sequence.

does it help? I'll try to find a capture asap

regards,
Andreas

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.