Ethereal-users: [Ethereal-users] Ring buffer issue with tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Cory Perry (SNL:434-951-7463)" <CPerry@xxxxxxx>
Date: Fri, 11 Nov 2005 12:13:41 -0500
I have run across and intersting issue with command line utility "Tetheral" when using (-b files:xxxx) ring buffers greater that 1024. (Used to keep a preset amount of historical data)
 
The number of files saves never exceeds 1024. If I set value to 2000 or 5000, again only 1024 files are kept, first file written is deleted, but file number will increase to set value of -b files:xxxxxx.
 
I have increased and decreased -a filesize:yyyyyy and -b files:xxxx (xxxx greater than 1024)
 
Here is test command: tethereal -a filesize:1 -b files:2000 -w c:\temp\capture\test1.cap
 
I am currently using the Windows version.
 
tethereal 0.10.13
Compiled with GLib 2.4.7, with WinPcap (version unknown), with libz 1.2.3,
with libpcre 6.3, with Net-SNMP 5.2.1.2, with ADNS.
Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based on libp
cap version 0.9[.x] on Windows XP Service Pack 2, build 2600.
 
 
 
David Cory Perry
Information Systems Security Officer
SNL Financial LC
434.951.7463 p
cperry@xxxxxxx