This is probably an upstream problem, but I'll post it here anyhow in case someone has a clue. I'm running ethereal 0.10.9-r1 on a Gentoo system, and I built it as follows: net-analyzer/ethereal-0.10.9-r1 -adns -debug -gtk -gtk2 -ipv6 -kerberos +snmp +ssl It starts up fine, but when I try to open an existing 1 GB capture file, it gets about 34% through it, then dies with the message ("Killed"). I'm assuming it ran out of memory, although the ulimits look fine: $ ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited file size (blocks, -f) unlimited max locked memory (kbytes, -l) unlimited max memory size (kbytes, -m) unlimited open files (-n) 1024 pipe size (512 bytes, -p) 8 stack size (kbytes, -s) unlimited cpu time (seconds, -t) unlimited max user processes (-u) 6132 virtual memory (kbytes, -v) unlimited I can break this file up into smaller chunks with "tcpslice"; in fact, it was *created* from 1000 1MB chunks with "tcpslice" :).
It also croaked with a Windows build of Ethereal on the same (768 MB) machine, so I'm reasonably certain it's an upstream memory limitation. I think I'll hit up the Ethereal mailing list or forum about this; if there is a capture size limitation, I'd sure like to know what it is, so I can plan my testing strategies accordingly. :)
thanks for taking this upstream.
