Wireshark-users: [Wireshark-users] Can I get Wireshark to capture constantly, but not count to in
From: Gregorio Tomas Focaccio <public.focaccio@xxxxxxxxx>
Date: Mon, 23 Aug 2010 13:00:18 -0700
Hello,

I'm setting up a small development / study network and I would like Wireshark to be constantly capturing, aside from pauses to reconfigure.   I want Wireshark to capture N packets or N megabytes worth of data or for N minutes and then, when it reaches N+1, to clear everything but keep capturing starting with a clean slate.  Is this possible?

I'm worried that with default settings a continuous capture will overload the memory resources of the server.   Is there a way to define a maximum memory allocation for captured data?

Thanks,
Greg