https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5892
--- Comment #10 from liaodh10@xxxxxxxxx 2011-05-13 10:04:01 PDT ---
(In reply to comment #7)
> If it just stops reading from the capture file, the packets in question will
> still be in the file, and if you save the capture, it'll save all the
> additional packets, even though it didn't display them.
I understand this.. and you are right, I retested it several times and it did
save the additional packets, sometimes even more than double of the number
displayed in the GUI - depending on how high the traffic rate is, in my case it
can be more than 50,000 packets/sec. But I don't think there is an easy way to
take care of this as well, since it might have to use a timestamp as a stop
point to remove the extra packets that have already been written to the capture
file. I'll leave it to you guys to figure out a long term solution for that.
And do you have any more comments about the file change (patch) I've attached
to this bug? Thanks
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
