Ask Your Question

Revision history [back]

Thx to you all for help. For the benefit of the readers, here is the answers in short: 1. Ring buffer capture file is created with 0600 permission. There is no option in wireshark GUI, but in command line, user can use "-g" option. 2. To have the file extension, user needs to provide the extension explicitly. For example: "hello.pcapng", will have something like "hello_00001_20200226191351.pcapng.

Thx to you all for help. For the benefit of the readers, here is the answers in short: short:

1. Ring buffer capture file is created with 0600 permission.   There is no **no option in wireshark GUI, GUI**, but in command line, user can use "-g" "**-g**" option.
2. To have the file extension, user **user needs to provide the extension explicitly. explicitly**.   For example: "hello.pcapng", will have something like "hello_00001_20200226191351.pcapng.

"hello_00001_20200226191351.pcapng.

Thx to you all for help. For the benefit of the readers, here is the answers in short:

1. 
  1. Ring buffer capture file is created with 0600 permission. There is **no no option in wireshark GUI**, GUI, but in command line, user can use "**-g**" option. 2. "-g" option.
  2. To have the file extension, **user user needs to provide the extension explicitly**. explicitly. For example: "hello.pcapng", will have something like "hello_00001_20200226191351.pcapng.
"hello_00001_20200226191351.pcapng.

Thx to you all for help. For the benefit of the readers, here is are the answers in short:

  1. Ring buffer capture file is created with 0600 permission. There is no option in wireshark GUI, but in command line, user can use "-g" option.
  2. To have the file extension, user needs to provide the extension explicitly. For example: "hello.pcapng", will have something like "hello_00001_20200226191351.pcapng.