https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9816

--- Comment #7 from Sloven <slov...@yandex.by> ---
> We have to store either the raw packet or the parsed data. A raw packet is 
> usually ~1500 bytes. The complete parsed data for a single packet is (in my 
> experiments) usually around 25000 bytes. We only store the raw packet, since 
> it > is much smaller.
I see. In this case will be useful button  that parse every packet in a saved
file, cut unparsed data and repacks the file (not in capture mode of course).

> It's very difficult to do consistently in a cross-platform way, and it is 
> easy 
> enough to see how much space you have and set the options appropriately.
Understood

> Ring-buffer does not work with temporary files
It's a pity

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to