This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm on Windows and turned on "capture to a permanent file" under Output, but the pcap file does not get updated until the capture is stopped. Is there anything I can do to keep the file constantly updated while capturing packets in real time? Thanks.

asked 10 Apr '16, 17:57

heisenburger's gravatar image

heisenburger
6112
accept rate: 0%

what are you trying to do?

(19 Apr '16, 13:48) Kurt Knochner ♦

The pcap file isn't updated after every packet - it would be very inefficient if it did - but it doesn't only get updated after capturing is stopped either. Perhaps this Microsoft article on File Caching will explain.

permanent link

answered 20 Jul '16, 10:42

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×22

question asked: 10 Apr '16, 17:57

question was seen: 1,443 times

last updated: 20 Jul '16, 10:42

p​o​w​e​r​e​d by O​S​Q​A