Wireshark-users: Re: [Wireshark-users] tshark creates files in temp dir

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Thu, 6 Nov 2008 14:39:25 -0700

On Thu, Nov 06, 2008 at 10:39:32AM -0700, Al Aghili wrote:

> When we run tshark on windows it sometimes creates these large files 
> in Windows/temp directory that start with "ether". Is there a way to 
> turn this off?

These files are used for temporarily storing captured data for the 
session that you run tshark for.  They should be deleted when tshark is 
closed and able to quit gracefully.  They cannot be turned off.  What 
version of tshark/Wireshark are you using?  How are you stopping tshark?


Steve