Wireshark Ring Buffer settings from Command line
I'm running Wireshark 3.0.0 for Windows 64bit
If I start Wireshark from the command line with the following parameters: -b duration:3600 -b filesize:2000 -b files:30 -w c:\windows\temp\filename.pcapng
Then Wireshark does start but the ring buffer setting page in Wireshark will show the correct settings for Filesize and Files, but the duration field will be disabled.
Is there something I should be doing differently?
A couple questions:
-i "the interface"?My use case: Wireshark launched with vanilla settings and left with a running capture will eventually use all available system resources, which is especially bad for production servers. To prevent this I've been using the ring buffer which periodically clears memory, but setting up the ring buffer at each launch of the application is tedious at best. Since Wireshark doesn't remember settings I want to include ring buffer settings on the command line.
When I use the -i option and the -b options I receive the same problem.
These same -b options work as expected in TShark. So it seems natural that they should work for Wireshark too.