 | 1 | initial version |
Capturing doesn't stop after 60 seconds, but if you stop the capture and look at the time duration, it's reset to 60 seconds. However, if you stop/start the current capture or more simply just restart the current capture, then the 24 hour stop duration will still be used, as long as you don't view the capture options again. Once you do that, then the 60 second capture duration will be applied, so if you had previously set the stop duration to 24 hours and hadn't noticed the change in the stop duration, your captures would unexpectedly stop much sooner than expected. This behavior is not intuitive and breaks user expectations; it should be filed as a Wireshark bug report.
