[Winpcap-users] Question about record to multiple files

j.snelders j.snelders at telfort.nl
Wed Nov 2 12:25:14 PDT 2011


Hi Tal,

Wireshark
http://www.wireshark.org/docs/wsug_html_chunked/ChCapCaptureOptions.html
Go to:
Capture | Options

Section Capture File(s)
File: define an outputfile
Select: 
- Use multiple files
- Next file every 25 megabyte(s)
- Next file every 1 hour(s)
Hit Start


TShark
http://www.wireshark.org/docs/man-pages/tshark.html
tshark -i 3 -a duration:3600 -a filesize:25000 -a files:3 -w test-a.pcap

Best regards
Joke
On Wed, 2 Nov 2011 19:58:23 +0200 Tal Attaly wrote:
>Hi,
>
>How can i make an automatic 'split' of the recorded file, so the recording
>will be saved in multiple files? (For example- start record to a new file
>as soon as the current file exceeds 25 MB / 60 minutes past)
>
>Thanks a lot,
>Tal



       




More information about the Winpcap-users mailing list