I'm on Windows and turned on "capture to a permanent file" under Output, but the pcap file does not get updated until the capture is stopped. Is there anything I can do to keep the file constantly updated while capturing packets in real time? Thanks. asked 10 Apr '16, 17:57  heisenburger |
One Answer:
The pcap file isn't updated after every packet - it would be very inefficient if it did - but it doesn't only get updated after capturing is stopped either. Perhaps this Microsoft article on File Caching will explain. answered 20 Jul '16, 10:42  cmaynard ♦♦ |
what are you trying to do?