Ethereal-users: [Ethereal-users] Ethereal Command Line Options

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Keith French" <keithfrench@xxxxxxxxxxxxx>
Date: Tue, 28 Feb 2006 21:55:20 -0000
When I start Ethereal V0.10.14 from the command line under WinXP SP2, what is the exact syntax & units for capturing to multiple files?
 
Is it:-
 
ethereal -i 4 -k -a filesize:64 -b -w c:\traces\test.cap
 
I assume this starts a new file every 64M and does not use a ring buffer?
 
Also when setting the kernel buffer with -B 20, does that set the buffer to 20M.
 
One final point - is there any calculations that can be performed on available free memory on the PC and the ideal file size when capturing to multiple files to avoid dropped packets?
 
Keith French.
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 268.1.1/271 - Release Date: 28/02/2006