Thank you Anders, as said, i will test again with dumpcap/Wireshark 0.99.4 br, Lars
Anders Broman (AL/EAB) wrote: > Hi, > What version is that? > I think there was a ringbuffer problem solved a while back... > BR > Anders > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Lars Ruoff > Sent: den 24 november 2006 13:19 > To: Wireshark-users > Subject: [Wireshark-users] Problems with dumpcap and ringbuffer > > Hi, > one of my customers in using dumpcap (on Windows) like this: > > > dumpcap -i X -w data/dump.pcap -b filesize:10000 -b files:100 > > (where X is the index of the right capture interface.) This should turn > on a max of 100 files * 10000KB = 1GB of maximum used disk space. > > He notes that: > <quote> > We have started the tests as indicated. Initially the filesize was > increasing in a proper manner, i.e. I checked at intervals and it was > for example, 1MB, 4MB, 6MB etc... > > However after some time, I checked the filesize again, and found a > number of files with a size of approximately 100 bytes each (1KB size on > disk), which I'm attaching for your comments. > </quote> > > Actually, these files contain a *single* (entire) packet! > > Anybody knowing what's going on here? > Is this a known bug and can something be done about it? > > thanks, > Lars > > > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
