I want to save result to a file automatically when start a new capture, but I don't want to set option each time, how i can do that?
asked 01 Jan '11, 02:50
If you drop out to a command line and do a "wireshark -h", it will give you all of the command line options.
wireshark -i 2 -k -b duration:20 -b filesize:100 -b files:10 -w paul.pcap
This sets the capture interface to interface 2 (-i 2), starts capturing immediatel (-k), sets a maximum file duration ring buffer option to 20 seconds (-b duration:20), a maximum ring buffer file size to 100KB (-b filesize:100), a maximum number of files saved to the last 10 (-b files:10), and an output basefile to paul.pcap.
answered 01 Jan '11, 07:19