2024-03-18 09:21:59 +0000 | commented question | Tshark does not save files in a ring Correct, it deletes the older files.
|
2024-03-18 09:20:54 +0000 | marked best answer | Tshark does not save files in a ring I'm trying to capture files in a ring buffer, but it seems like tshark ignores files:10
What am I doing wrong? "C:\Program Files\Wireshark\tshark" -i "Ethernet 4" -b filesize:100 -b files:10 -w capture.pcap
Capturing on 'Ethernet 4'
** (tshark:5936) 17:54:33.111802 [Main MESSAGE] -- Capture started.
** (tshark:5936) 17:54:33.120450 [Main MESSAGE] -- File: "capture_00001_20240315175433.pcap"
783 ** (tshark:5936) 17:54:47.823130 [Main MESSAGE] -- File: "capture_00002_20240315175447.pcap"
1560 ** (tshark:5936) 17:55:02.201369 [Main MESSAGE] -- File: "capture_00003_20240315175502.pcap"
2340 ** (tshark:5936) 17:55:16.886229 [Main MESSAGE] -- File: "capture_00004_20240315175516.pcap"
3123 ** (tshark:5936) 17:55:31.022563 [Main MESSAGE] -- File: "capture_00005_20240315175531.pcap"
3896 ** (tshark:5936) 17:55:45.261889 [Main MESSAGE] -- File: "capture_00006_20240315175545.pcap"
4677 ** (tshark:5936) 17:55:59.911016 [Main MESSAGE] -- File: "capture_00007_20240315175559.pcap"
5454 ** (tshark:5936) 17:56:14.487242 [Main MESSAGE] -- File: "capture_00008_20240315175614.pcap"
6235 ** (tshark:5936) 17:56:28.918045 [Main MESSAGE] -- File: "capture_00009_20240315175628.pcap"
7012 ** (tshark:5936) 17:56:43.249923 [Main MESSAGE] -- File: "capture_00010_20240315175643.pcap"
7796 ** (tshark:5936) 17:56:57.954122 [Main MESSAGE] -- File: "capture_00011_20240315175657.pcap"
8568 ** (tshark:5936) 17:57:12.413741 [Main MESSAGE] -- File: "capture_00012_20240315175712.pcap"
|
2024-03-18 09:20:54 +0000 | received badge | ● Scholar
(source)
|
2024-03-15 13:10:22 +0000 | asked a question | Tshark does not save files in a ring Tshark does not save files in a ring
I'm trying to capture files in a ring buffer, but it seems like tshark ignores file |
2018-03-28 07:11:54 +0000 | received badge | ● Editor
(source)
|
2018-03-28 07:11:54 +0000 | edited question | Wireshark 2 cannot decode RTCP Wireshark 2 cannot decode RTCP
I have found a lot of instructions to decode RTCP, but they do not work. I suppose that t |
2018-03-24 06:48:25 +0000 | asked a question | Wireshark 2 cannot decode RTCP Wireshark 2 cannot decode RTCP
I have found a lot of instructions to decode RTCP, but they do not work. I suppose that t |