This was one of the most-often reported bugs in 0.99.0: http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=895
Lars Ruoff wrote: > Additional info: > It is dumpcap from Ethereal 0.99.0 > I told the customer to try again with dumpcap/Wireshark 0.99.4. > But then i think this part hasn't much evolved? > Lars > > > Lars Ruoff wrote: >> Hi, >> one of my customers in using dumpcap (on Windows) like this: >> >> > dumpcap -i X -w data/dump.pcap -b filesize:10000 -b files:100 >> >> (where X is the index of the right capture interface.) >> This should turn on a max of 100 files * 10000KB = 1GB of maximum used >> disk space. >> >> He notes that: >> <quote> >> We have started the tests as indicated. Initially the filesize was >> increasing in a proper manner, i.e. I checked at intervals and it was >> for example, 1MB, 4MB, 6MB etc... >> >> However after some time, I checked the filesize again, and found a >> number of files with a size of approximately 100 bytes each (1KB size on >> disk), which I'm attaching for your comments. >> </quote> >> >> Actually, these files contain a *single* (entire) packet! >> >> Anybody knowing what's going on here? >> Is this a known bug and can something be done about it? >> >> thanks, >> Lars >> >> >> _______________________________________________ >> Wireshark-users mailing list >> Wireshark-users@wireshark.org >> http://www.wireshark.org/mailman/listinfo/wireshark-users > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
