Wireshark-bugs: [Wireshark-bugs] [Bug 1591] dumpcap in ring buffer mode. overflow
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 16 May 2007 11:00:25 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1591





------- Comment #2 from zheltov@xxxxxxxxx  2007-05-16 11:00 GMT -------
let me say I start 'dumpcap -i x -b 32 -b filesize:5012 -b files:5 -w test.cap'
I have input stream about 200Mb/s (but I tried with less one as well) on Gbit
ethernet card. The all packets are equal: udp, 1322 bytes each. It takes me
about 2 hours to approach 99999 number of files. I watch the files in buffer
ring with usual window, just refreshing it. Once 99999 files reached - there is
only one file in ring buffer. Dumpcap is still capturing, but rewrites only one
file 10001,10002....
The point is that after capturing is stopped I'd like to have few last files
with information.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.