RAM consumption increasing on right click in capture file

  • retag add tags

I opened a small pcap file. It is around ~50MB and takes about ~125MB RAM initially. When I right click on the capture file the RAM increases extremely quickly until it's taking over 20GB of RAM and non-responsive.

Using windows 10 & Wireshark 3.6.7

craigb's avatar
1
craigb
asked 2022-08-10 17:13:24 +0000
edit flag offensive 0 remove flag close merge delete

Comments

"right click on the capture file" - more detail. Right click where? Was a context menu item run?

Chuckc's avatar Chuckc (2022-08-10 20:34:16 +0000) edit
more
  • delete

right click anywhere on the display windows - my attempt was to colourize a tcp stream but the RAM increases as soon as I right click.

More context, this is a pcap file saved using tcpdump on another machine. It doesn't happen during a live capture.

craigb's avatar craigb (2022-08-10 21:01:04 +0000) edit
more
  • delete

Attempting to colourize from the context menu does _not_ resulted in additional memory usage. It's very specific to the right click action.

craigb's avatar craigb (2022-08-10 21:02:46 +0000) edit
more
  • delete

Can you recreate the issue with a subset of the capture file? Would it be possible to anonymize and share the file?

Chuckc's avatar Chuckc (2022-08-10 22:08:42 +0000) edit
more
  • delete

I was able to recreate the issue on another machine.

Happy to share, even just saving a small number of packets and exporting the issue is still present. What is the best mechanism for sharing? (i.e. how to transfer the file)

craigb's avatar craigb (2022-08-10 22:10:49 +0000) edit
more
  • delete
add a comment see more comments