This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is there an inbuilt Log File limit from command line. files:200 generates thousands of logs.

0

Hi,

Is there an inbuilt Log File limit from command line. files:200 generates thousands of logs.

At 200, i get many thousands of log files. I stopped them at 20,000 manually.

"C:\Program Files\Wireshark\Wireshark.exe" -i "Local Area Connection" -k -w "C:\SOE\Logs\NetCap.pcapng" -N "mntC" -t ad -b filesize:10000 -b files:200

asked 01 Apr '14, 21:45

timekeeper5150's gravatar image

timekeeper5150
1●1●1●1
accept rate: 0%

One Answer:

0

I remember we had this 'problem' here, but I can't find the question for it. So, here are some questions in return.

  • What is your OS version?
  • What is you Wireshark version?

  • Is there any security software on the PC that might prevent Wireshark from deleted the old ring buffer files? If so, did you try to disable that software?

  • did you try to capture with dumpcap instead of Wireshark

dumpcap -i "Local Area Connection" -w "C:\SOE\Logs\NetCap.pcapng" -b filesize:10000 -b files:200

Regards
Kurt

answered 02 Apr '14, 13:25

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%