Ethereal keeps crashing when doing analysys on 100000 packet captures

[Red Squirrel]

Just for kicks I decided to run tcpdump on my main server which also runs vmware server and has my p2p vm in there, and I limited it to 100,000 packets, which is not really that much to consider some packets such as dns lookups are reletively small.

But in ethereal, I keep getting random crashes, usually when I try to do something like generate a graph. I just get the "send error report to microsoft" dialog. Why is this? And is there a way to fix it? If I use the linux version of ethereal, would I get better reliability? I currently dont have a linux box configured with a GUI, but I can always setup a VM with ubuntu or something.

 

[nweaver]

could be a malformed packet

 

[spidey07]

you need more memory.

 

[Madwand1]

Ethereal -> WireShark. There are a couple of updates; bug and vulnerability (due to malformed packet) fixes. There's always at least a small chance that they will have fixed some issues you're experiencing in passing, but there's also a good chance that they'll use more memory instead of less.