Wireshark exits when a capture is stopped on Windows

asked 2020-12-21 07:28:07 +0000

Singi gravatar image

updated 2020-12-21 15:19:49 +0000

grahamb gravatar image

Normal capture, the program will automatically exit after pressing stop capture, resulting in unable to save the captured data.

edit retag flag offensive close merge delete

Comments

On what operating system is this, and what version of Wireshark is this?

Guy Harris gravatar imageGuy Harris ( 2020-12-21 08:24:06 +0000 )edit

Windows 10. Wireshark Version 3.4.2 (v3.4.2-0-ga889cf1b1bf9)

Singi gravatar imageSingi ( 2020-12-21 08:36:50 +0000 )edit

Can you post the contents of the Wireshark menu item Help -> About Wireshark -> Wireshark dialog as there's more info there we need? Also what type of interface are you capturing on?

grahamb gravatar imagegrahamb ( 2020-12-21 15:19:22 +0000 )edit

@grahamb is there some way to determine whether this is a crash, rather than a normal exit, such as a dialog popped up by Windows for an application crash, or an event log search that would find an application crash?

Guy Harris gravatar imageGuy Harris ( 2020-12-21 21:03:43 +0000 )edit

@Guy Harris, if Windows Error Reporting (WER) is enabled, then with most crashes the usual dialog is displayed and something should be logged in the appropriate location. More info about WER here.

If a stack overflow occurs then there may not be any indication, the application can just disappear.

grahamb gravatar imagegrahamb ( 2020-12-21 22:50:00 +0000 )edit
see more comments