Hi. I got problem with “closing file waiting…."

Try using dumpcap instead. It's a command line tool that you can use to capture packets to disk, and you'll find it in the Wireshark installation directory. Wireshark uses dumpcap itself to capture files, so you can do the same.

Use dumpcap -D to get a list of capture interfaces first. Then you can run dumpcap with parameter -i and the number of the interface to capture on it.

A typical dumpcap call could look like this:

dumpcap -i 1 -w capture.pcapng -b filesize:100000

to capture on interface 1, write to file "capture.pcapng" and create a new file each 100MB. In fact, if you use -b like that, each filename will have date and time and a running number added to it to become unique.

This looks like bug 3046 to me. The work-around is to follow the advice that Jasper provided.