Wireshark-users: [Wireshark-users] buffering problem
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Ammar Lilamwala" <ammar.lilamwala@xxxxxxxxx>
Date: Fri, 25 Jul 2008 08:08:36 +0100
HI all.
I am using tshark to capture rtcp packets in linux (opensuse 10.3)
when i want to display the output in the standard output(monitor) i get the data instantaneously
the command i use is is

tshark -d udp.port==12001,rtcp -e rtcp.ssrc.jitter -e rtcp.ssrc.fraction -e rtcp.ssrc.dlsr -i eth1 -R "rtcp" -T fields

Now when i want to store the output in a file and i use the same command as above with the redirection operator
the output only gets stored once i terminate tshark using ctrl+c. ie only when the buffer is flushed.

any suggestions how to overcome this problem. i searched a bit and tried using the setvbuf option in linux but i dont know how to use it.
can i do some changes in tshark to solve this buffering problem.
i need to be able to monitor the rtcp packets in real time . thats why.

regards
ammar