Wireshark-users: Re: [Wireshark-users] Live capture stops suddenly
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 17 Mar 2009 21:04:38 -0700

On Mar 17, 2009, at 8:55 PM, Chris Henderson wrote:


On Sat, Mar 14, 2009 at 2:09 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:


On Mar 12, 2009, at 8:15 PM, Chris Henderson wrote:

Is dumpcap still running when packets stop arriving?


I started dumpcap after wireshark stopped capturing and dumpcap
staretd capturing packets.


Wireshark doesn't capture traffic itself - it runs dumpcap to do so.
If you run Wireshark to do a capture, and it stops capturing traffic, is the dumpcap that it started still running? 


What happens if you try running dumpcap, or tcpdump, from a terminal
window?  Does it also stop seeing packets after a while?


dumpcap stops after a while as well.


What about tcpdump?