Wireshark-users: Re: [Wireshark-users] Continuous/circular in-memory tracing?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Fri, 21 Dec 2007 22:10:45 -0700
On Fri, Dec 21, 2007 at 10:00:54PM -0500, Jay Levitt wrote:

> As far as I can tell from searching the forum, there's no good way to
> keep Wireshark up and running and capturing to an in-memory circular
> buffer,

Correct.

> Or is there another way to do this, either with Wireshark

Maybe in the future.  I thought this had been requested before, but I
don't see it in the wish list (wiki.wireshark.org/WishList) or in the
bug database (http://bugs.wireshark.org) at quick glance.  Would you
mind opening a bug report (marked as an enhancement request) at
http://bugs.wireshark.org to request this feature?

> or another tool (either free or commercial but not enterprise-priced)?

If I remember correctly, Sniffer can do memory only capturing, but I'm
not positive.  I don't know how much it costs, but there are free demos
available.


Steve