This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

hi

I made packet-capture file and this is updated continuously by program. And I opened this file in wireshark and I reloaded file continuously because wireshark readed file once. I annoyed this act, so how can I do automaticuly this act?

I 'm bad at English. But please understand me.

asked 28 Jun '12, 06:56

netwguy's gravatar image

netwguy
1112
accept rate: 0%

edited 28 Jun '12, 06:58


You are CAPTURING the data with another program, and you're VIEWING the capture file with Wireshark while the capture is running?

You can't do what you want with that setup. Use Wireshark for both capturing and viewing and you will see the packets update in real time.

permanent link

answered 28 Jun '12, 10:22

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

Have your capture program write to a pipe instead of a file. Use Wireshark to capture from the pipe.

permanent link

answered 29 Jun '12, 08:50

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×91
×23

question asked: 28 Jun '12, 06:56

question was seen: 3,223 times

last updated: 29 Jun '12, 08:50

p​o​w​e​r​e​d by O​S​Q​A