Ask Your Question
0

Stratoshark 0.10.0 Launch Error

asked 2026-06-09 10:04:46 +0000

meta gravatar image

updated 2026-06-09 10:41:29 +0000

Chuckc gravatar image

Hi Team,

While launching the shortcut for Stratoshark 0.10.0, I am encountering the error shown below.

Unable to load sinsp plugin C:\Program Files\Stratoshark\plugins\falco\cloudtrail.dll: Caught sinsp exception cannot load plugin C:\Program Files\Stratoshark\plugins\falco\cloudtrail.dll: can't load plugin dynamic library: The specified module could not be found.

Unable to load sinsp plugin C:\Program Files\Stratoshark\plugins\falco\gcpaudit.dll: Caught sinsp exception cannot load plugin C:\Program Files\Stratoshark\plugins\falco\gcpaudit.dll: can't load plugin dynamic library: The specified module could not be found.

The same behavior is observed in both of the following scenarios:

Upgrading from Stratoshark 0.9.3 to 0.10.0
Performing a fresh installation of 0.10.0

The application is being tested on a Windows 10 x64 virtual machine.

Could you please assist.

edit retag flag offensive close merge delete

Comments

Don't have a solution but can recreate on my Win10 dev system also.

Chuckc gravatar imageChuckc ( 2026-06-09 12:21:53 +0000 )edit

Maybe easier to capture output using strato output:

C:\Program Files\Stratoshark>strato -G plugins
 ** (strato:11700) 07:33:45.274296 [(none) MESSAGE] -- JSON Dictionary: No config.txt or jsonmain.xml found (using generic mode)
strato: Unable to load sinsp plugin C:\Program Files\Stratoshark\plugins\falco\cloudtrail.dll: Caught sinsp exception cannot load plugin C:\Program Files\Stratoshark\plugins\falco\cloudtrail.dll: can't load plugin dynamic library: The specified module could not be found.
.
strato: Unable to load sinsp plugin C:\Program Files\Stratoshark\plugins\falco\gcpaudit.dll: Caught sinsp exception cannot load plugin C:\Program Files\Stratoshark\plugins\falco\gcpaudit.dll: can't load plugin dynamic library: The specified module could not be found.
.
 ** (strato:11700) 07:33:45.485578 [GLib CRITICAL] -- g_hash_table_foreach_remove: assertion 'hash_table != NULL' failed
falco-events.dll        0.9.2   dissector       C:\Program Files\Stratoshark\plugins\4.7\epan\falco-events.dll
mate.dll                1.0.1 ...
(more)
Chuckc gravatar imageChuckc ( 2026-06-09 12:35:32 +0000 )edit

Similar to 21083: Stratoshark hangs at startup on macOS with Go-based Falco plugins after welcome page overhaul ?

C:\Program Files\Stratoshark>extcap\falcodump.exe --extcap-interfaces
 ** (falcodump:8528) 07:38:12.607402 [falcodump WARNING] C:\gitlab-builds\builds\cyI2ZH7yy\0\wireshark\wireshark\extcap\falcodump.cpp:309 -- load_plugins(): cannot load plugin C:\Program Files\Stratoshark\plugins\falco\cloudtrail.dll: can't load plugin dynamic library: The specified module could not be found.

 ** (falcodump:8528) 07:38:12.616751 [falcodump WARNING] C:\gitlab-builds\builds\cyI2ZH7yy\0\wireshark\wireshark\extcap\falcodump.cpp:309 -- load_plugins(): cannot load plugin C:\Program Files\Stratoshark\plugins\falco\gcpaudit.dll: can't load plugin dynamic library: The specified module could not be found.

extcap {version=1.0.0}{help=file:///C:/Program%20Files/Stratoshark/falcodump.html}
interface {value=k8saudit}{display=Falco plugin}
Chuckc gravatar imageChuckc ( 2026-06-09 12:40:33 +0000 )edit
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2026-06-10 00:56:06 +0000

Gerald Combs gravatar image

This isn't the same as issue 21083, but it's a direct result of fixing that bug. As described in issue 21083, the Go runtime officially supports loading at most one shared library written go. You can get away with loading more than one on most platforms, but not macOS on Intel. In order to mitigate this, I rewrote the CloudTrail and GCP plugins in Rust, which doesn't have that limitation. However, the Rust "std" crate requires libunwind on Windows, and unfortunately we weren't including it in the Stratoshark installer. This will be fixed in Stratoshark 0.10.1, and if anyone could verify that it's fixed in 0.10.1rc0-81 or later at https://www.wireshark.org/download/au... it would be most helpful.

edit flag offensive delete link more

Comments

Startup ok now. Endless scrolling of message below. Sparkline update?

Stratoshark 0.10.1rc0-83-g4b80091bd1f3 (ssv0.10.1rc0-83-g4b80091bd1f3).

 ** (stratoshark:11300) 20:27:27.513957 [GUI WARNING] C:\gitlab-builds\builds\cyI2ZH7yy\1\wireshark\wireshark\ui\qt\manager\interface_statistics.cpp:298 -- onWorkerFailed(): Interface statistics worker: Child dumpcap closed sync pipe prematurely
Chuckc gravatar imageChuckc ( 2026-06-10 01:31:25 +0000 )edit

Child dumpcap closed sync pipe prematurely

There shouldn't be be any interfaces on which to get statistics in Stratoshark. (other than extcaps, but I don't think we do statistics on them)

If 0.10.x is built from the main branch, this might be a consequence of issue #21332, but, even given that, dumpcap shouldn't be crashing or quitting without at least sending Stratoshark a nice farewell notice.

Please file a separate issue on that.

Guy Harris gravatar imageGuy Harris ( 2026-06-10 10:21:00 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2026-06-09 10:04:46 +0000

Seen: 306 times

Last updated: Jun 10