RE: Capture file crashes Ethereal/Tethereal

That is interesting, in that the file before and after are same size,
etc. based on information returned by capinfos. Must be borderline on
file capture size, all other files load with no problem. I was able to
break down file into smaller chunks using editcap and review . Thanks
for the help.

 


Message: 5
Date: Sun, 21 May 2006 13:51:04 +0200 (CEST)
From: Jaap Keuter <[email protected]>
Subject: Re: [Ethereal-users] Capture file crashes Ethereal/Tethereal
To: Ethereal user support <[email protected]>
Message-ID: <[email protected]>
Content-Type: TEXT/PLAIN; charset=US-ASCII

Hi,

It looks like you hit a memory allocation error. Refering to frame
number
287577 tell's me that it's a large capture file. You're simply running
out of memory. You could use editcap to split up the capture file before
analysis.

Thanx,
Jaap

On Fri, 19 May 2006, Cory Perry (SNL:434-951-7463) wrote:

> I am trying to look at a capture file but get the below error while 
> trying to load.
>
> 16:08:21          Err  file emem.c: line 244: assertion failed:
> (npc->buf != NULL)
>
> I am using Ethereal: 0.99.0
> Winpcap 3.1 (3.1.0.27)
>
> I've also run file through tethereal and it fails on frame 287577 with

> unspecified fatal error encountered, aborting. This file is part of a 
> group of files that are being rotated via ring buffer. There are 2 
> files I am trying to look at from a specific time frame, that get the 
> above error. Files before and after load ok.
>