Eliminate the gui overhead with tshark. Use the -w and -b options for
longer term captures. "tshark -h" should get you started
-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Hans Nilsson
Sent: Friday, 19 January 2007 12:00 p.m.
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Buffers size, ring buffer and multiple
files
Didn't someone on this list say that Wireshark isn't primarily a
capturing tool for capturing massive amounts of data, it's more on an
protocol analyzer? So maybe try saving the data with another tool and
the reviewing it in Wireshark.
On Thu, 18 Jan 2007 12:41:09 -0800, "Chet Seligman"
<cseligman@xxxxxxxxxxxxx> said:
> When I want to capture a very large amount of traffic, I usually set
up
> for
> multiple files(10-20), buffer size of 64meg, new file every 64meg and
> ring
> buffer of up to 10 files.
>
> Is this the best configuration?
> Does anyone have rules of thumb?
>
> Occasionally WS crashes in extended captures, even with much smaller
> parameters.
>
> Chet
--
Hans Nilsson
hasse_gg@xxxxxxxx
--
http://www.fastmail.fm - Same, same, but different...
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
____________________________________________________________________
CAUTION - This message may contain privileged and confidential
information intended only for the use of the addressee named above.
If you are not the intended recipient of this message you are hereby
notified that any use, dissemination, distribution or reproduction
of this message is prohibited. If you have received this message in
error please notify Air New Zealand immediately. Any views expressed
in this message are those of the individual sender and may not
necessarily reflect the views of Air New Zealand.
_____________________________________________________________________
For more information on the Air New Zealand Group, visit us online
at http://www.airnewzealand.com
_____________________________________________________________________
