Re: large capture files

[Christopher Maynard <christopher.maynard () gtech com>]

Abbhishek Misra <abhishekfishy2000@...> writes:

> I'm using wireshark to capture wifi packet. 
> When capture is run for long duration,  say 70k+ plus packets, wireshark hangs.
>
> Please let me know what method should be used for large captures.

Try using dumpcap[1] instead, then post-analyze the capture file(s) with
Wireshark afterwards.  Using dumpcap will avoid any potential out-of-memory[2]
problems that can occur with long-running captures.

- Chris

[1]: http://www.wireshark.org/docs/man-pages/dumpcap.html
[2]: http://wiki.wireshark.org/KnownBugs/OutOfMemory


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe