Re: [Ethereal-users] Crash in Ethereal 0.10.3

["Martin Regner" <martin.regner@xxxxxxxxx>]

Hans Persson wrote:
> I just installed Ethereal 0.10.3 on a freshly installed Windows XP
> machine (together with Winpcap 3.0, but got the same result with the
> beta that was available).
>
> What happens is that when I click a SIP packet after making a capture,
> Ethereal crashes. Other types of packets can be clicked without any
> problems. I have now downgraded to 0.10.0 and have no problems there.
>

There is a problem with SIP-dissector in 0.10.3 that has been solved in cvs
version. The problem was introduced shortly before 0.10.3 released and fixed
some days later.

I know you can get a crash when you select a SIP packet if at least one of
the conditions below is true:
-The SIP packet is sent over TCP
-The SIP packet is not sent to/from UDP port 5060 (either source port or
destination port needs to be 5060 otherwise you may get the crash)
-The preference setting "Try heuristic dissectors first" for UDP is enabled
(Edit/Preferences/Protcols/SIP)

http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html

> Another thing is that 0.10.0 chooses my wireline interface (which is
> active) to capture from, while 0.10.3 consistently chooses my wireless
> interface (which is disabled). This has an obvious workaround, but is
> still annoying.
>

It should be possible to define the default interface in the preference
settings,
Edit/Preferences/Capture/Default interface + Save
Try that.