When I start Ethereal V0.10.14 from the command
line under WinXP SP2, what is the exact syntax & units for capturing to
multiple files?
Is it:-
ethereal -i 4 -k -a filesize:64 -b -w
c:\traces\test.cap
I assume this starts a new file every 64M and does
not use a ring buffer?
Also when setting the kernel buffer with -B 20,
does that set the buffer to 20M.
One final point - is there any calculations that
can be performed on available free memory on the PC and the ideal file size when
capturing to multiple files to avoid dropped packets?
Keith French.
|
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 268.1.1/271 - Release Date: 28/02/2006