hi, ok for Dumpcap but it does not correspond exactly to the expressed needs that are : - have a look "in real time" at the trafic - be able to save some of the displayed packet (like we can do with a K12xx from Tektronix that we use frequently) we do not need to / want to save the whole trafic like dumpcap seems to do. That's is why I thought about that solution and why I come back to it. If there is no way to have my "save while capturing" menu item (or equivalent), I will use dumpcap and talk about it but as far as possible I'd like to avoid this solution. Anyway thanks for your answers Regards Yann ________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of philippe alarcon Sent: Wednesday, January 06, 2010 5:55 PM To: wireshark-dev Subject: Re: [Wireshark-dev] Where is the "Packet Range" dialog box created ? Dumcap has another advantage : it is much faster than Wireshark as it has no graphic interface to process. Date: Wed, 6 Jan 2010 10:19:33 -0500 > From:> [email protected] > To: [email protected] > Subject: Re: [Wireshark-dev] Where is the "Packet Range" dialog box created ? > > Why not use dumpcap for day-long capturing instead of Wireshark? > > You can configure dumpcap to run continuously or for just a single day > then stop, and you can configure dumpcap to capture only a certain > amount of data per file. When the limit is reached, it will close the > file and open a new one. That makes the files a little more manageable > to analyze later on. You can always use mergecap to combine them later > if you want or you can use editcap to further split them if they're > still too big. You can view any of the files in Wireshark at any time > without having to stop dumpcap. > > See "dumpcap -h" or "man dumpcap" or > http://www.wireshark.org/docs/man-pages/dumpcap.html > > > - Chris > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of BARILLY YANN > Sent: Wednesday, January 06, 2010 3:40 AM > To: Developer support list for Wireshark > Subject: Re: [Wireshark-dev] Where is the "Packet Range" dialog box > created ? > > [snip] > CONFIDENTIALITY NOTICE: The contents of this email are confidential > and for the exclusive use of the intended recipient. If you receive this > email in error, please delete it from your system immediately and > notify us either by email, telephone or fax. You should not copy, > forward, or otherwise disclose the content of the email. > > ___________________________________________________________________________ > Sent via: Wireshark-dev mailing list <[email protected]> > Archives: http://www.wireshark.org/lists/wireshark-dev > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev > mailto:[email protected]?subject=unsubscribe ________________________________ PC, téléphones portables, souris hi-tech. à gagner grâce à Hotmail ! C'est ici ! <http://www.hotmailmagicmoment.com>
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
