Limit capture size

asked 2017-11-16 14:36:10 +0000

andykirwin
1 ●1 ●1 ●1

Hi,

I can see in the "Capture Interface" menu under the "Options" tab you can set Wireshark to "stop capture automatically after..." a set parameter but this option is lost when Wireshark is closed and reopened.

I am trying to set Wireshark to stop capturing if it reaches a certain file size and would like the option to be set perpetually as a fail safe. I have had a couple of systems go down after the Wireshark desktop application was left running and all the systems memory was used.

Many thanks,

Andy K

edit retag flag offensive close merge delete

add a comment

answered 2017-11-16 20:25:49 +0000

Jaap

13720 ●683 ●115

updated 2017-11-16 20:59:09 +0000

sindy
6209 ●5 ●66 ●55

Indeed this is not something saved in your profile. Maybe it could be. If you file an enhancement bug this request will not be forgotten, although it's no guarantee its getting implemented.

In the mean time, if you want to save yourself the hassle of setting up Wireshark to capture with these parameters, you may want to consider a batch file or powershell script, or whatever it's called these days, to run dumpcap directly with the file roll over parameters. You can leave that running as long as you like and take the capture files of interest.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Limit capture size

1 Answer

Your Answer

Question Tools

Stats

Limit capture size edit

1 Answer

Your Answer

Question Tools

Stats

Limit capture size