Is there a way to set up ethereal to capture to a file of a fixed size and
wrap/overwrite when the file fills? Frequently with poorly defined,
intermittent problems, it is desireable to start a trace, leave it running
until the problem occurs, then get the user to hit stop. For those cases,
all I'm interested in is the traffic in the few minutes (or seconds) before
the problem occurs. Ethereal just keeps capturing data and storing data
and if I don't know enough about the problem to set a decent capture
filter, the capture file just gets way too big fairly quickly. I can't
leave it running for weeks, that's for sure. I end up having to use our
Network General sniffer for a lot of things that I would rather use
ethereal for. Thanks.
Chris Noynaert
c-noynaert@xxxxxxxx
Texas A&M University
Computing & Information Services
Network Installations
979-845-8593