I ran an instance of tshark to analyse data on one tcp port, and set to terminate after a certain amount of data was received. However, I seem to have over estimated how long it would take for that amount of data to be received.
asked 04 May '16, 03:49
Yes, you can run multiple instances if you want. It just puts more stress on the capturing system.
answered 04 May '16, 03:52