On Fri, Dec 21, 2007 at 10:00:54PM -0500, Jay Levitt wrote:
> As far as I can tell from searching the forum, there's no good way to
> keep Wireshark up and running and capturing to an in-memory circular
> buffer,
Correct.
> Or is there another way to do this, either with Wireshark
Maybe in the future. I thought this had been requested before, but I
don't see it in the wish list (wiki.wireshark.org/WishList) or in the
bug database (http://bugs.wireshark.org) at quick glance. Would you
mind opening a bug report (marked as an enhancement request) at
http://bugs.wireshark.org to request this feature?
> or another tool (either free or commercial but not enterprise-priced)?
If I remember correctly, Sniffer can do memory only capturing, but I'm
not positive. I don't know how much it costs, but there are free demos
available.
Steve
