Janssens, Kitty wrote: > I'm working with version 0.99.3a on Solaris (see version.txt). > > I try to tell wireshark to work with a ring buffer, like this : > > wireshark -k -w output -b files:10 -b filesize:10 -i > /PLAT/data/ss7monitoring/online/k5_0005.pipe -o > gui.window_title:"V1.0.60_ProfileID_5" --display=... > But this doesn't seem to work. The first file is OK, but then > wireshark creates a lot of small files : > > -rw------- 1 be083074 cc_users 10376 nov 23 2006 > output_00001_20061123131915 > -rw------- 1 be083074 cc_users 110 nov 23 2006 > output_00002_20061123131935 > -rw------- 1 be083074 cc_users 144 nov 23 2006 > output_00003_20061123131935 > -rw------- 1 be083074 cc_users 110 nov 23 2006 > output_00004_20061123131935 > -rw------- 1 be083074 cc_users 144 nov 23 2006 > output_00005_20061123131935 > -rw------- 1 be083074 cc_users 24 nov 23 2006 > output_00006_20061123131935 > > > I found Bug 895 that seems to describe this problem, but it also says > that this is solved in version 0.99.2. > > Am I doing something wrong or is this bug not fixed in the version I > use ?? As you noted, that bug should have been fixed already.
I just tried the current SVN version and didn't see the problem: each output file is about 10k. I don't think anything has changed in this area between 0.99.3 and the current SVN version so I can't explain the behavior you're seeing. _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users