 | 1 | initial version |
This can be recreated with current Wireshark (4.0.4) and a capture made with a icmp capture filter with a pause between pings to a remote site.
I'm not sure if this is an Enhancement Request or a bug. I couldn't find an existing issue (open or closed) related to this. Feel free to open a new issue on the Wireshark Gitlab issues page. Include which of the results is your preference if it were to be implemented.
I would have expected that if a given 1 sec chunk contained no data I would either get an empty .pcapng file for the given time period or I would get no .pcapng at all. I could live with either of these x2 scenarios.
ask_wireshark$ editcap.exe -v Editcap (Wireshark) 4.0.4 (v4.0.4-0-gea14d468d9ca). Copyright 1998-2023 Gerald Combs <[email protected]> and contributors. Licensed under the terms of the GNU General Public License (version 2 or later). This is free software; see the file named COPYING in the distribution. There is NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.32, build 31332), with GLib 2.72.3, with PCRE2, with zlib 1.2.12, with binary plugins. Running on 64-bit Windows 10 (22H2), build 19045, with Intel(R) Core(TM) i5-4300U CPU @ 1.90GHz (with SSE4.2), with 12191 MB of physical memory, with GLib 2.72.3, with PCRE2 10.40 2022-04-14, with LC_TYPE=C, binary plugins supported. ask_wireshark$ editcap.exe -V -i 1 230321_31069_editcap_intervals.pcapng 230321_foo.pcapng File 230321_31069_editcap_intervals.pcapng is a Wireshark/... - pcapng capture file. Packet: 1 Packet: 2 Continuing writing in file 230321_foo_00001_20230321122028.pcapng Packet: 3 Packet: 4 Continuing writing in file 230321_foo_00002_20230321122029.pcapng Packet: 5 Packet: 6 Continuing writing in file 230321_foo_00003_20230321122030.pcapng Packet: 7 Packet: 8 Continuing writing in file 230321_foo_00004_20230321122044.pcapng Continuing writing in file 230321_foo_00005_20230321122044.pcapng Continuing writing in file 230321_foo_00006_20230321122044.pcapng Continuing writing in file 230321_foo_00007_20230321122044.pcapng Continuing writing in file 230321_foo_00008_20230321122044.pcapng Continuing writing in file 230321_foo_00009_20230321122044.pcapng Continuing writing in file 230321_foo_00010_20230321122044.pcapng Continuing writing in file 230321_foo_00011_20230321122044.pcapng Continuing writing in file 230321_foo_00012_20230321122044.pcapng Continuing writing in file 230321_foo_00013_20230321122044.pcapng Continuing writing in file 230321_foo_00014_20230321122044.pcapng Continuing writing in file 230321_foo_00015_20230321122044.pcapng Continuing writing in file 230321_foo_00016_20230321122044.pcapng Continuing writing in file 230321_foo_00017_20230321122044.pcapng Packet: 9 Packet: 10 Continuing writing in file 230321_foo_00018_20230321122045.pcapng Packet: 11 Packet: 12 Continuing writing in file 230321_foo_00019_20230321122046.pcapng Packet: 13 Packet: 14 Continuing writing in file 230321_foo_00020_20230321122047.pcapng Packet: 15 Packet: 16 Continuing writing in file 230321_foo_00021_20230321122054.pcapng Continuing writing in file 230321_foo_00022_20230321122054.pcapng Continuing writing in file 230321_foo_00023_20230321122054.pcapng Continuing writing in file 230321_foo_00024_20230321122054.pcapng Continuing writing in file 230321_foo_00025_20230321122054.pcapng Continuing writing in file 230321_foo_00026_20230321122054.pcapng Continuing writing in file 230321_foo_00027_20230321122054.pcapng Packet: 17 Packet: 18 Continuing writing in file 230321_foo_00028_20230321122055.pcapng Packet: 19 Packet: 20 Continuing writing in file 230321_foo_00029_20230321122056.pcapng Packet: 21 Packet: 22 Continuing writing in file 230321_foo_00030_20230321122057.pcapng Packet: 23 Packet: 24 ask_wireshark$ ask_wireshark$ for FILE in 230321_foo*; do capinfos.exe -c $FILE; done File name: 230321_foo_00000_20230321122027.pcapng Number of packets: 2 File name: 230321_foo_00001_20230321122028.pcapng Number of packets: 2 File name: 230321_foo_00002_20230321122029.pcapng Number of packets: 2 File name: 230321_foo_00003_20230321122030.pcapng Number of packets: 2 File name: 230321_foo_00004_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00005_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00006_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00007_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00008_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00009_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00010_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00011_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00012_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00013_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00014_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00015_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00016_20230321122044.pcapng Number of packets: 0 File name: 230321_foo_00017_20230321122044.pcapng Number of packets: 2 File name: 230321_foo_00018_20230321122045.pcapng Number of packets: 2 File name: 230321_foo_00019_20230321122046.pcapng Number of packets: 2 File name: 230321_foo_00020_20230321122047.pcapng Number of packets: 2 File name: 230321_foo_00021_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00022_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00023_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00024_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00025_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00026_20230321122054.pcapng Number of packets: 0 File name: 230321_foo_00027_20230321122054.pcapng Number of packets: 2 File name: 230321_foo_00028_20230321122055.pcapng Number of packets: 2 File name: 230321_foo_00029_20230321122056.pcapng Number of packets: 2 File name: 230321_foo_00030_20230321122057.pcapng Number of packets: 2 ask_wireshark$
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
