Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Ring Buffer - How can I restart sniffer in old sequence

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Wed, 25 Feb 2009 15:20:50 -0500


Fabio Gabriel wrote:
Hello team and another users!
How can I restart tshark or dumpcap without it creat a new sequence of files in Ring Buffer mode? In other words ... How can I restart the OLDEST RING, instead of CREAT A NEW RING?

I don't think that's possible: the ring buffer code will always start a new ring.