Re: [Ethereal-users] Ethereal crash problem

[Guy Harris <guy@xxxxxxxxxx>]

On Tue, Jun 04, 2002 at 03:47:48PM +0400, Ruben Ghazaryan wrote:
> I run Ethereal,  capturing something and click Stop.
> After that starts Loading process and the program crashes.

There might be a bug in one of the dissectors for some protocol, causing
Ethereal to crash when it tries to analyze one of the packets in the
capture.

There will probably be a file with a name beginning with "etherXXXX" in
either

	C:\Temp

or

	C:\Documents and Settings\{your name|\Local Settings\Temp

("{your name}" is the name you login under; it'll probably be in C:\Temp
on NT 4.0, but it might be in the other directory on W2K).

Try running Ethereal and using the "Open" item in the "File" menu to
open that temporary file.  If Ethereal crashes when you try that,
there's probably a dissector bug of some sort.

In order to solve that problem, you would either

	1) have to send us the capture file, so we can try to reproduce
	   the problem ourselves - note that this will be making public
	   data from your network

or

	2) either install Visual C++ and arrange that its debugger be
	   started up when Ethereal crashes, or get a stack trace by
	   some other means (I don't know whether you can get a stack
	   trace on Windows without the VC++ debugger) and send us the
	   stack trace.

> The versions of installed programs are:
> ethereal-setup-0.9.3.exe
> WinPcap_2_3.exe
> ethereal-093-h323-plugin-dll-003b

Well, this might be a bug fixed in Ethereal 0.9.4; unfortunately, I
don't know whether the H.323 plugin works with 0.9.4 or not - if not,
you'd have to wait for a new version of the plugin.

In addition, note that the bug might be a bug in the plugin rather than
in Ethereal itself.