Wireshark · Wireshark-dev: Re: [Wireshark-dev] Tshark ver 0.99.6 crashed whole system 4th time while using display-filter optio

["Moheed Moheed Ahmad" <moheedm@xxxxxxxxx>]

Hi all,

 

This time (5th time) system crashed without any filter option, so its not a filter issue.

No core as system goes to kgdb.

 

Regds,

Moheed

On Wed, Jun 11, 2008 at 3:20 PM, Moheed Moheed Ahmad <moheedm@xxxxxxxxx> wrote:

Hi,

 

I had a tshark built on version 0.99.6.

 

My system mets serious crashes while running tshark using display filters and goes to KGDB. (crash is not consistent though, this time it was 4th crash). I couldn't get any core as system went to KGDB mode.

 

Please let me know if it's known issue. and if yes, has it been fixed in 1.0.0?

 

Here are the other relevent information

 a) I was running tshark (version 0.99.6) as a root
Output of
root#tshark -v
TShark 0.99.6 (SVN Rev 22249)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.6.1, with libpcap 0.9.8, with libz 1.2.1.1, with libpcre
4.5, without Net-SNMP, without ADNS, without Lua, without GnuTLS, without
Gcrypt, without Kerberos.

Running on Linux 2.6.10_mvl401-pc_target, with libpcap version 0.9.8.

Built using gcc 3.4.3 (MontaVista 3.4.3-25.0.116.0601565 2006-09-20).

 b) Processor Intel (Xeon) also Linux kernel 2.6.10

 c) I used following display filters. (For three crashes it was different )

               -r "arp && arp.dst.port_ipv4 == 172.23.145.196"

               -r "ip.proto == 1"

               -r "ip.addr == 192.168.1.2"

               -r "ip.addr == 172.23.145.198"

 

 

Also When I run tshark without root, it errors out with permission denied. What can I do to run it as a normal user?

 

 

--

Thanks,
Moheed Moheed Ahmad

-- 
Moheed Moheed Ahmad