Wireshark mailing list archives
Re: Wireshark Questions.
From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Tue, 24 Nov 2009 17:40:51 +0100
On Mon, 23 Nov 2009 17:32:29 -0500, Irene T Nguyen <inguyen3 () csc com> wrote:
I had a couple questions about Wireshark. 1. Is it backwards compatible? 2. How much data can be captured at one time? Thank you, -Irene
Hi, 1. Backwards compatible with what? Option: Ethereal(R)? Yes, it's a continuation of Ethereal(R) under a new name. Option: Can it still read old capture files? Yes, capture file support is even extended. Option: Can it still load my plugins? No, the plugin API/ABI is not guaranteed across versions. You'll have to recompile. Option: If it's another compatibility option, please specify which. 2. The amount of data which can be captured very much depends on the nature of the data. During the capture, Wireshark immediately dissects this data, resulting in ever growing memory use. It's the memory use which limits your long term capture. If you need long term capture, please use dumpcap. If you need to analyze very large captures, use tools like Pilot. Thanks, Jaap ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Wireshark Questions. Irene T Nguyen (Nov 24)
- Re: Wireshark Questions. Jaap Keuter (Nov 24)