Wireshark · Wireshark-users: Re: [Wireshark-users] DumpCap and Multiple Files

[Guy Harris <guy@xxxxxxxxxxxx>]

Shlomo Taub wrote:
>  >> What is the purpose of -a along with -b?
>  >
>  >Simplified: -a specifies when to stop the whole capture process while -b
>  >is the criteria when to switch to a new file.
>
> Right. So what is the purpose of using both together, as in 
> http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=895 ?

Where in Ethereal bug 895 are they using both together?  The command 
they show has two "-b" flags, and a "-t" flag with "a" as the argument, 
but no "-a" flag.

As for cases where one would use both of them, one might, for example, 
want to capture traffic for 24 hours and store it in a series of files, 
with each file being at most 10 megabytes.