I have two questions about wireshark usage:
1. In the wireshark->capture->options dialog there are possibilities to define multiple capture files and condition when to switch to the next one. For example by size, every 5 MB start to save to new log file. My question is whether the same thing is possible to configure using tshark from command line. As far as I know there is only option -w to specify output file. So how to specify multiple output file using tshark?
2. Ia m running wireshark under Linux Ubuntu 7.10 operating system. I don't understand why but the Wireshark -> Preferences -> Protocols tab is empty. I can't click on the plus sign next to word "Protocols" in the Wireshark -> Preferences and open list of available protocols.
I tried to open Wireshark -. Preferences -> Protocols on my WindowsXP computer and there I can see list of protocols (including IEEE 802.11) without any problems. So it seems to me the problem is
Ubuntu specific.
Could you advice what might be went wrong?
Thanks
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile.
Try it now.
