Since I sent out my first note late a couple of Fridays back and someone
who knows the might have missed it, I'll try again. Last time, I promise.
>Is there a way to set up ethereal to capture to a file of a fixed size and
wrap/overwrite when the file fills? Frequently with poorly defined,
intermittent problems, it is desireable to start a trace, leave it running
until the problem occurs, then get the user to hit stop. For those cases,
all I'm interested in is the traffic in the few minutes (or seconds) before
the problem occurs. Ethereal just keeps capturing data and storing data
and if I don't know enough about the problem to set a decent capture
filter, the capture file just gets way too big fairly quickly. I can't
leave it running for weeks, that's for sure. I end up having to use our
Network Associates sniffer for a lot of things that I would rather use
ethereal for.
Maybe instead starting up a CRON job that runs once a day that starts a
capture (if there is already one running) then stops the previous capture?
Chris Noynaert
c-noynaert@xxxxxxxx
Texas A&M University
Computing & Information Services
Network Installations
979-845-8593
