Ethereal-users: Re: [Ethereal-users] Decoding Big snoop packet capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sun, 29 Oct 2000 21:11:32 -0800
On Mon, Oct 30, 2000 at 03:48:14PM +1100, Jesus M. Salvo Jr. wrote:
> What about leaving ethereal doing a packet capture and saving the
> capture to a file without live update?

That works fine until you stop the capture, at which point Ethereal will
try to read the capture in, and will have the same problem.  All it does
is delay the point at which it'd run out of virtual memory if you have a
really large capture.