Ethereal-dev: Re: [Ethereal-dev] Introducing additional capture-stop capabilities

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 3 Dec 2001 23:33:45 -0800
On Wed, Aug 22, 2001 at 05:49:47PM +0200, Thomas Wittwer wrote:
> 1. General
> ----------
> We have enhanced the Ethereal capture function by two new stop mechanisms:
> a) it is now possible to configure the maximum capture duration in seconds.
> b) it is now possible to configure the maximum capture file size in
> kilobytes.

I've checked in that, with some cleanups and bug fixes, and updates to
the man page to document it.

> Further, it is now possible to write the capture data to a set of files in
> ringbuffer style instead of using just one file. This allows the user to do
> an 'endless' capture without filling up the harddisk. The ringbuffer just
> works,
> if real time capturing is disabled. Ringbuffer capturing just creates a
> configurable
> number of dump files. To view the content of the files, each of them must be
> opened manually. The created dump files have a time stamp as part of their
> name.

I haven't checked that in yet - it doesn't seem to be working correctly;
the capture files I see when I stop the capture are extremely short
(shorter than they should be).  I'll look at that.