Hi,

1&2 are easy: Use dumpcap i.s.o. wireshark: it just captures data from the
network and stores it at the location you indicate. No dissection is done, so no
RAM is consumed for that.

3, I'm not sure. Looks like you're running Win32, so YMMV. Have a try with
Ubuntu or something, that usually works.

Thanx,
Jaap

junk mail wrote:
> I have 3 questions
>
> 1)      How do I change the default save directory from c:\docu~\a\temp
> ?  My c drive is very low on space and I need to change this save
> location to my d drive where I have more space.
>
> 2)      How can I get wireshark to not stop capturing after RAM runs out
> ?  Thing is the captures I am running are generating about 1gb of
> capture file size for every 2 minutes of capture and then after about 2
> minutes it tells me wireshark is out of memory and is about to close but
> the capture is automatically saved at that location.  Ideally I would
> like to be able to capture for about 20 minutes at a time
>
> 3)    How can I preserve vlan tags when capturing ?  I already
> downloaded the intel driver, as well as edited my registry as per
> intel's intructions but it still strips the vlan tags.
>
> I am running wireshark 1.0.4 latest release downloaded this week on a
> compaq 8510p laptop with 2gb ram.
>
>
> Thanks people
>
> Santino
>

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users