Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9816] Crash when temporary capture file fills up the file system

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 7 on bug 9816 from Sloven

> We have to store either the raw packet or the parsed data. A raw packet is 
> usually ~1500 bytes. The complete parsed data for a single packet is (in my 
> experiments) usually around 25000 bytes. We only store the raw packet, since it > is much smaller.
I see. In this case will be useful button  that parse every packet in a saved
file, cut unparsed data and repacks the file (not in capture mode of course).

> It's very difficult to do consistently in a cross-platform way, and it is easy 
> enough to see how much space you have and set the options appropriately.
Understood

> Ring-buffer does not work with temporary files
It's a pity

---

      You are receiving this mail because:

• You are watching all bug changes.