RAM consumption increasing on right click in capture file

asked 2022-08-10 17:13:24 +0000

craigb gravatar image

I opened a small pcap file. It is around ~50MB and takes about ~125MB RAM initially. When I right click on the capture file the RAM increases extremely quickly until it's taking over 20GB of RAM and non-responsive.

Using windows 10 & Wireshark 3.6.7

edit retag flag offensive close merge delete

Comments

"right click on the capture file" - more detail. Right click where? Was a context menu item run?

Chuckc gravatar imageChuckc ( 2022-08-10 20:34:16 +0000 )edit

right click anywhere on the display windows - my attempt was to colourize a tcp stream but the RAM increases as soon as I right click.

More context, this is a pcap file saved using tcpdump on another machine. It doesn't happen during a live capture.

craigb gravatar imagecraigb ( 2022-08-10 21:01:04 +0000 )edit

Attempting to colourize from the context menu does _not_ resulted in additional memory usage. It's very specific to the right click action.

craigb gravatar imagecraigb ( 2022-08-10 21:02:46 +0000 )edit

Can you recreate the issue with a subset of the capture file? Would it be possible to anonymize and share the file?

Chuckc gravatar imageChuckc ( 2022-08-10 22:08:42 +0000 )edit

I was able to recreate the issue on another machine.

Happy to share, even just saving a small number of packets and exporting the issue is still present. What is the best mechanism for sharing? (i.e. how to transfer the file)

craigb gravatar imagecraigb ( 2022-08-10 22:10:49 +0000 )edit
see more comments