Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 2275] New: "Finished writing file" notification in ring-buffer mode.

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2275

           Summary: "Finished writing file" notification in ring-buffer
                    mode.
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: martin@xxxxxxxxx


Build Information:
TShark 0.99.6

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.14.1, with libpcap 0.9.7, with libz 1.2.3.3, with libpcre
7.4, without Net-SNMP, with ADNS, without Lua, with GnuTLS 1.6.3, with Gcrypt
1.2.4, with MIT Kerberos.

Running on Linux 2.6.22-14-rt, with libpcap version 0.9.7.

Built using gcc 4.1.3 20070929 (prerelease) (Ubuntu 4.1.2-16ubuntu2).

--
I'm using tshark in a probe-type appliance, and I want the probe to capture
into a circular buffer, and to copy the files making up the buffer to an
analysis station . The circular buffering works perfectly, no problems, but I'm
finding it difficult to come up with a method of deciding when to upload, and
what file to upload.

I'd like to be able to do this:
tshark -i eth0 -b 20 -a filesize:10000 -q -w buffer.dmp --show-filename

and have tshark print
Finished writing to buffer-01.dmp
Finished writing to buffer-02.dmp

etc,etc

T'would be easy then.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.