First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

After several hours of operation on Windows 10, wireshark stops with "The network adapter on which the capture was being done is no longer running"

  • retag add tags

Deja de funcionar. Si lo paro y vuelvo a arrancar funciona correctamente.

Depende del tamaño de algún buffer? Puedo hacerlo más grande?

susipropa's avatar
1
susipropa
asked 2020-10-24 11:31:43 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2020-10-26 21:16:04 +0000
edit flag offensive 0 remove flag close merge delete

Comments

@susipropa

This is an English site, via google translate:

It stops working. If I stop it and restart it, it works correctly.

Does it depend on the size of a buffer? Can I make it bigger?

grahamb's avatar grahamb (2020-10-24 11:54:31 +0000) edit

What stops working, what are you trying to do?

grahamb's avatar grahamb (2020-10-24 11:55:02 +0000) edit

This windows appears

The network adapter on which the capture was being done is no longer running; the capture has stopped. OK

susipropa's avatar susipropa (2020-10-24 16:38:20 +0000) edit

I am capturing the traffic between 2 IPs.. I need to do it for a long time

susipropa's avatar susipropa (2020-10-24 16:40:42 +0000) edit

On what operating system is Wireshark running?

Guy Harris's avatar Guy Harris (2020-10-24 21:47:40 +0000) edit
add a comment see more comments

1 Answer

0

For long-term captures use dumpcap, it retains less state and will run for longer without running out of memory and also consider using multiple files with the -b ringbuffer option to split the capture into smaller more manageable files.

If the network adaptor stops running, then the capture can't continue and stops with the message you have mentioned. There are a few reasons for this, but an adaptor going into power save mode is a possibility.

grahamb's avatar
23.8k
grahamb
answered 2020-10-24 18:49:11 +0000
edit flag offensive 0 remove flag delete link

Comments

Thank you for the answer. Is it possible to prevent the network adapter from going into power saving mode?

susipropa's avatar susipropa (2020-10-26 06:52:35 +0000) edit

Possibly, that will be down to your Windows 10 power management settings.

grahamb's avatar grahamb (2020-10-26 08:51:41 +0000) edit

If you're going to capture for a long time, you not only would want to prevent the adapter from going into power save mode, you want to prevent your machine from going into power save mode - in other words, you will have to prevent it from sleeping.

Guy Harris's avatar Guy Harris (2020-10-26 21:13:04 +0000) edit

Thanks for the help, it looks like that. I will see how to prevent the computer and the adapter from falling asleep

susipropa's avatar susipropa (2020-10-27 18:23:35 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer