This is our old Q&A Site. Please post any new questions and answers at

I would like to configure Wireshark to generate a file in Visual Networks format every day. Is it possible? I just plan to launch Wireshark one time.


asked 12 May '16, 14:26

puertas12's gravatar image

accept rate: 0%

edited 12 May '16, 14:26

You mean start Wireshark once, and for it to create a new capture file every day?

(12 May '16, 15:16) grahamb ♦

That is exactly what I mean

(13 May '16, 03:41) puertas12

Firstly, for long term captures use dumpcap, as Wireshark will run out of memory at some point.

Next, have a look at dumpcap's -b duration:86400 ring buffer option to write a new file every day. note that this won't be synchronised to the exact start of the day, instead it will be 86400 seconds from when dumpcap is started.

Finally, dumpcap won't write the capture in the format you've requested "Visual Networks", use editcap to post process the capture file.

permanent link

answered 13 May '16, 03:55

grahamb's gravatar image

grahamb ♦
accept rate: 22%

A more in-depth discussion, written by Jeremy Stretch, of what @grahamb suggests is at

(13 May '16, 06:55) coloncm
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 12 May '16, 14:26

question was seen: 5,849 times

last updated: 13 May '16, 06:56

p​o​w​e​r​e​d by O​S​Q​A