Search code examples
linuxsegmentation-faultdocker-containercoredumptshark

tshark with --export-dicom gives “Segmentation fault (core dumped)”


Scenario: I have two docker container: A(ubuntu) and B(debian). My host is a ubuntu server.

Container A sniff the traffic on the host and write pcap file on a mounted volume (bind). Container B access the same volume (mounted, bind) to extract object from pcap files.

When I run the tshark command tshark -r pcapfile.pcap --export-objects "dicom, targetfolder" inside container B the output is "Segmentation fault (core dumped)".

My best guess until now is that I have a permission problem although both containers are accessing the volume as root and changing the file permission also didn't help.

Am I on the wrong path? Is this error related to a permission problem? What I can do to make both containers share the same mounted volume on the host?

EDIT:
The bug has been fixed. Refer to Wireshark bug 16748.


Solution

  • Am I on the wrong path?

    Yes.

    Is this error related to a permission problem?

    No.

    It's related to a bug in Wireshark; "tshark ... gives "Segmentation fault (core dumped)"" means "there is a bug in tshark".

    Please report this as a bug on the Wireshark Bugzilla.