[Winpcap-users] Pcap File Location
guy at alum.mit.edu
Tue Jul 26 19:02:18 PDT 2011
On Jul 26, 2011, at 7:32 AM, Emre Erişgen wrote:
> Is there a way to change the path for saving pcap file?
Change the path *where*?
In WinPcap, you specify the path for saving a pcap file in the pcap_dump_open() call; to change the path, change the string you pass as the second argument.
In WinDump, you specify the path for saving a pcap file in the "-w" argument to the command; to change the path, change the argument you supply to "-w".
In dumpcap and TShark, the answer is the same as with WinDump.
In Wireshark, you can either start the capture from the command line, in which case the answer is the same as with WinDump, or you start it from the GUI, in which case you either specify the path in the "Capture Options" dialog or specify it when you save the capture.
In other programs, well, it depends on what the other program lets you do.
More information about the Winpcap-users