capture from pipe broken, `wireshark -k -i -` no longer works

[Andreas Schultz]

Since today's updates from bionic, reading a capture from a pipe with `wireshark -k -i -` no longer works.

Very simple test case, do a local capture through a pipe:

tcpdump -s 0 -w - -i enp0s31f6 | wireshark -k -i -

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: wireshark 2.4.5-1
ProcVersionSignature: Ubuntu 4.15.0-12.13-generic 4.15.7
Uname: Linux 4.15.0-12-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.9-0ubuntu1
Architecture: amd64
CurrentDesktop: XFCE
Date: Wed Mar 28 10:43:51 2018
InstallationDate: Installed on 2017-09-26 (182 days ago)
InstallationMedia: Ubuntu-Server 17.10 "Artful Aardvark" - Alpha amd64 (20170924)
SourcePackage: wireshark
UpgradeStatus: Upgraded to bionic on 2017-12-08 (109 days ago)

[Andreas Schultz (aschultz)]

update, after some experimentation it turns out that this config setting it to blame:

 gui.column.format:
 "No.", "%m",
 "Time", "%t",
 "Source", "%s",
 "Destination", "%d",
 "Protocol", "%p",
 "Length", "%L",
 "RAT-Type", "%Cus:diameter.RAT-Type:0:R",
 "Info", "%i"

More specifically, the "RAT-Type" column breaks it. After removing that line, everything works again.

I'm going to report this upstream.

[Balint Reczey (rbalint)]

On Wed, Mar 28, 2018 at 10:51 AM, Andreas Schultz <email address hidden> wrote:
> update, after some experimentation it turns out that this config setting
> it to blame:
>
> gui.column.format:
> "No.", "%m",
> "Time", "%t",
> "Source", "%s",
> "Destination", "%d",
> "Protocol", "%p",
> "Length", "%L",
> "RAT-Type", "%Cus:diameter.RAT-Type:0:R",
> "Info", "%i"
>
> More specifically, the "RAT-Type" column breaks it. After removing that
> line, everything works again.
>
> I'm going to report this upstream.

Thanks, I referenced the upstream bug from this one.

[Peter Wu (lekensteyn)]

This appears to be fixed in Wireshark 2.4.6 and newer.