Ask Your Question
0

Limit capture size

asked 2017-11-16 14:36:10 +0000

Hi,

I can see in the "Capture Interface" menu under the "Options" tab you can set Wireshark to "stop capture automatically after..." a set parameter but this option is lost when Wireshark is closed and reopened.

I am trying to set Wireshark to stop capturing if it reaches a certain file size and would like the option to be set perpetually as a fail safe. I have had a couple of systems go down after the Wireshark desktop application was left running and all the systems memory was used.

Many thanks,

Andy K

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2017-11-16 20:25:49 +0000

Jaap gravatar image

updated 2017-11-16 20:59:09 +0000

sindy gravatar image

Indeed this is not something saved in your profile. Maybe it could be. If you file an enhancement bug this request will not be forgotten, although it's no guarantee its getting implemented.

In the mean time, if you want to save yourself the hassle of setting up Wireshark to capture with these parameters, you may want to consider a batch file or powershell script, or whatever it's called these days, to run dumpcap directly with the file roll over parameters. You can leave that running as long as you like and take the capture files of interest.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2017-11-16 14:36:10 +0000

Seen: 58 times

Last updated: Nov 16