From: Gianluca Varenni
Sent: Thu 1/18/2007 2:59 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
Also, the disks can definitely be a bottleneck for such a network speed. The
links Jaap was referring to don't seem to talk about that.
I wo
D] On Behalf Of ARAMBULO, Norman
R.
Sent: Thursday, January 18, 2007 7:18 PM
To: Wireshark-Users (E-mail); Tcpdump-Workers (E-mail);
Tcpdump-Workers-Owner (E-mail)
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
Importance: High
Thanks for the response, yup I know that wireshark or ethereal
Thanks for the response, yup I know that wireshark or ethereal cant handle
large amount of data, so does tcpdump and dumpcap capable of handling such
data, can we use it to capture large amount of data, save it to multiple files
for Tshark or Tethereal for post process. Pls advise and thanks
r" <[EMAIL PROTECTED]>
To: "Community support list for Wireshark"
Sent: Wednesday, January 17, 2007 10:30 PM
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
> Hi,
>
> That is some serious speed. That requires adequate hardware and
> processing. Google the
I would do
tcpdump -w capture_file -s0 -i interface
the -s0 makes sure the packets are not cut in size...
On 18.01.2007, at 02:38, Sebastien Tandel wrote:
> basically,
>
> tcpdump -w capture_file -i interface_name
>
> tshark -r capture_file
>
>
> but the man pages should be of great help for fu
Hi,
That is some serious speed. That requires adequate hardware and
processing. Google the net for high speed network capture and see what's
been said. like:
http://www.tcpdump.org/lists/workers/2005/01/msg00031.html and this
http://luca.ntop.org/nCap.pdf
Thanx,
Jaap
On Thu, 18 Jan 2007, ARAMBUL
Sebastien Tandel,
Thanks for the info, yup we already tried it but it seems it doesnt work. What
we are trying to do is capture packets and save it in another file
where tshark or tethereal process it, we tried using tcpdump or dumpcap but it
doesnt work, the network is relatively high about
basically,
tcpdump -w capture_file -i interface_name
tshark -r capture_file
but the man pages should be of great help for further information.
Regards,
Sebastien Tandel
ARAMBULO, Norman R. wrote:
> Hi, has anyone tried using tcpdump or dumpcap to capture packets on a
> GigE interface, we are
