ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] DumpCap and Multiple Files

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 04 Jul 2006 17:04:15 -0700
Shlomo Taub wrote:
 >> What is the purpose of -a along with -b?
 >
 >Simplified: -a specifies when to stop the whole capture process while -b
 >is the criteria when to switch to a new file.

Right. So what is the purpose of using both together, as in http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=895 ?

Where in Ethereal bug 895 are they using both together? The command they show has two "-b" flags, and a "-t" flag with "a" as the argument, but no "-a" flag.

As for cases where one would use both of them, one might, for example, want to capture traffic for 24 hours and store it in a series of files, with each file being at most 10 megabytes.