Wireshark · Wireshark-users: Re: [Wireshark-users] tshark vs dumpcap

Wireshark-users: Re: [Wireshark-users] tshark vs dumpcap

From: Guy Harris <guy@xxxxxxxxxxxx>

Date: Sun, 30 Oct 2011 14:13:58 -0700

On Oct 30, 2011, at 2:02 PM, Marco Zuppone wrote:

> The official WireShark study guide states that dumpcap consumes less memory..

...because it doesn't dissect packets and keep any persistent data needed to do that.

References:
- [Wireshark-users] tshark vs dumpcap
  - From: Stuart Kendrick
- Re: [Wireshark-users] tshark vs dumpcap
  - From: Marco Zuppone

Prev by Date: Re: [Wireshark-users] tshark vs dumpcap
Next by Date: [Wireshark-users] Faster: tshark or tcpcump?
Previous by thread: Re: [Wireshark-users] tshark vs dumpcap
Next by thread: Re: [Wireshark-users] tshark vs dumpcap
Index(es):
- Date
- Thread