Ask Your Question
0

Crashing Wireshark: Enter ip.host==10.x.

asked 2018-02-21 21:22:26 +0000

acrawford1820 gravatar image

I have a packet capture with hosts that are in the Class A range. In the expression filter, if I enter 'ip.host=10.254.' Wireshark will crash every time. In fact, any host IP that starts with 10.x. as soon as you enter the second '.' Wireshark consistently crashes. I have Wireshark Version 2.3.0-1855-gb3b23ff. Unfortunately I cannot upgrade/test on 2.4.4 at this time due to corporate IT.

edit retag flag offensive close merge delete

Comments

So corporate IT won't allow you to upgrade from a pre-release version, for which we provide no support or bug fixing, to an actual release, where we'll try to fix the bug in a subsequent release? That sounds completely insane, although "completely insane" is not unheard of in corporate IT departments.

All Wireshark versions where the second component of the version number is an odd number, such as 2.3.0, are pre-release versions

Guy Harris gravatar imageGuy Harris ( 2018-02-22 00:26:46 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-02-22 06:15:40 +0000

Jaap gravatar image

So I guess the real answer is: get a stable release version.

As a possible workaround use a DNS. Find out the registered name of the host you want to filter and use that name in the expression. YMMV though.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-02-21 21:22:26 +0000

Seen: 405 times

Last updated: Feb 22 '18