This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How do I set the capture to auto save periodically so WireShark doesn't crash?

asked 02 Apr '11, 13:29

bkready's gravatar image

bkready
1111
accept rate: 0%


Open up the capture options dialog (second button on the toolbar, or "Capture" -> "Options" in the main menu) and set a file name. Then check "Use multiple files" and select a good file size for "Next file every ... megabytes". You could also go for "Next file every ... minutes" but I only recommend doing that when the amount of traffic is very consistent, otherwise the megabyte limits make more sense.

Finally, to stop your disk from running out of space you might consider to use the "Ring buffer with..." feature. The way it works is that as soon as Wireshark has written the number of files you set it will replace the oldest and continue to capture, overwriting files as needed.

permanent link

answered 02 Apr '11, 13:52

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

2

But keep in mind that Wireshark is a very memory intensive application, so even with using multiple files and ring buffering as Jasper mentions, it might still crash if it runs out of memory. The recommended solution in that case, especially when performing long-term capturing, is to use dumpcap instead, which also supports writing to multiple files and ring buffers, but whose memory usage is much lower.

(03 Apr '11, 08:01) cmaynard ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×42
×4

question asked: 02 Apr '11, 13:29

question was seen: 49,170 times

last updated: 03 Apr '11, 08:01

p​o​w​e​r​e​d by O​S​Q​A