1 | initial version |
A ring buffer that rolls the files after a certain size is close to what you're looking for.
2 | No.2 Revision |
A ring buffer that rolls the files after a certain size is close to what you're looking for.
Dumpcap is doing the work underneath. Check -b|--ring-buffer
to see how the options being set in the Wireshark Gui are used.