Wireshark-users: [Wireshark-users] Resuming Circular File Buffer after a Computer Reboot
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "J P" <jrp999@xxxxxxxxx>
Date: Fri, 25 Jan 2008 14:05:38 -0600
Hi Everyone,
 
I have DUMPCAP running as a service on a Windows XP computer. 
 
The service is setup for DUMPCAP to:
  • rotate the files after 250 MB or 15 mins
  • keep a maximum number of 1350 files in a circular file buffer.
The problem I am experiencing is that when the computer reboots DUMPCAP starts a new circular buffer with a new file name.  This results in the old files not being purged during the circular file buffer process.
 
Is there anyway to keep only 1350 of the newest files that start with particular sequence of characters in the capture directory and purge the old ones?
 
Thanx,
 
John