This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

Is there an inbuilt Log File limit from command line. files:200 generates thousands of logs.

At 200, i get many thousands of log files. I stopped them at 20,000 manually.

"C:\Program Files\Wireshark\Wireshark.exe" -i "Local Area Connection" -k -w "C:\SOE\Logs\NetCap.pcapng" -N "mntC" -t ad -b filesize:10000 -b files:200

asked 01 Apr '14, 21:45

timekeeper5150's gravatar image

timekeeper5150
1111
accept rate: 0%


I remember we had this 'problem' here, but I can't find the question for it. So, here are some questions in return.

  • What is your OS version?
  • What is you Wireshark version?
  • Is there any security software on the PC that might prevent Wireshark from deleted the old ring buffer files? If so, did you try to disable that software?

  • did you try to capture with dumpcap instead of Wireshark

dumpcap -i "Local Area Connection" -w "C:\SOE\Logs\NetCap.pcapng" -b filesize:10000 -b files:200

Regards
Kurt

permanent link

answered 02 Apr '14, 13:25

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×91
×28
×23
×8
×1

question asked: 01 Apr '14, 21:45

question was seen: 1,581 times

last updated: 02 Apr '14, 13:25

p​o​w​e​r​e​d by O​S​Q​A