Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9816] New: Crash when massive packet flow cannot be saved in a temp file

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	9816
Summary	Crash when massive packet flow cannot be saved in a temp file
Classification	Unclassified
Product	Wireshark
Version	1.10.5
Hardware	x86
OS	Windows 7
Status	CONFIRMED
Severity	Normal
Priority	Medium
Component	Wireshark
Assignee	bugzilla-admin@wireshark.org
Reporter	Sloven0@yandex.by

Build Information:
Compiled (32-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_3), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with
PortAudio V19-devel (built Dec 19 2013), with AirPcap.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.
Intel(R) Core(TM)2 CPU         T7200  @ 2.00GHz, with 3070MB of physical
memory.

Built using Microsoft Visual C++ 10.0 build 40219
--
Capture packets with big data (I used Iperf to create a flow). After will be no
free space in temp directory program stop capturing and appears error window:

Not all the packets could be written to the file to which the capture was being
saved
("C:\Users\Locky\AppData\Local\Temp\wireshark_pcapng_32F944C0-3DFD-4F02-9466-E8F38671D943_20140227205439_a03308")
because there is no space left on the file system on which that file resides.
Please report this to the Wireshark developers.
(This is not a crash; please do not report it as such.)

Funny thing is that program crahes if massive packet flow will not ends.
Sometimes program doesn't manage to draw error window.
To proceed you need to delete big temp file manualy otherwise program will
crash again after new start.
----------------
I suggest to create an option "Do not save unparsed data" and set it by
default.
Also might create option "Overwrite temp file in cycle when free space on disk
will reach specified limit".
GUI option "Path to temp file".

---

      You are receiving this mail because:

• You are watching all bug changes.