Wireshark-dev: Re: [Wireshark-dev] Packet Size limited during capture message
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Mike Morrin" <Mike.Morrin@xxxxxxxxxxxx>
Date: Mon, 22 Mar 2010 06:59:27 -0000
When I run a pcap file with my dissector in place wireshark crashes 
(win32.dll error).

But I was able to run the pcap file and stop the loading process before 
it crashed and one thing that I noticed
was in the info column it said "Packet Size limited during capture".

I never saw this before...does anybody know what this means..?? Could 
this be why it was crashing..??

MM- I have seen "Packet Size limited during capture" due to a bug where
a dissector assumed that a PDU always had a data segment at the end, but
occasionally one didn't.  That would not directly cause your crash, you
probably have 2 bugs.

Try running with a breakpoint in do_throw() (around line 182 in except
.c), on a trace that has only the packet(s) that cause the problem.





This message contains confidential information and may be privileged. If you are not the intended recipient, please notify the sender and delete the message immediately.

ip.access Ltd, registration number 3400157, Building 2020,
Cambourne Business Park, Cambourne, Cambridge CB23 6DW, United Kingdom