Comment Comment by tacoman tshark also has a fabulous ring buffer feature that lets you run captures continuously while chunking the files up into manageable sizes.e.g. -b filesize:100000 -b files:200 -w somefileThis will make a ring buffer of 200 * 100MB files.After typing this, I realized this may have limited use cases, but I use it almost every day. parent tacoman 12 years ago
e.g. -b filesize:100000 -b files:200 -w somefile
This will make a ring buffer of 200 * 100MB files.
After typing this, I realized this may have limited use cases, but I use it almost every day.