[Guy Harris <guy@xxxxxxxxxx>]

> I installed the 0.9.0 windows package and winpcap and was attempting to take
> a network capture for a script with the following command:
> 
> C:\Progra~1\Ethereal\tethereal -afilesize:500 -b2 -c65535 -Fnetmon2 -wc:\tes
> t.cap
> 
> I can't seem to get the ring buffer feature to work.

It only works when writing files out in the standard Ethereal format
(libpcap/tcpdump/WinDump format); it won't work with the "-F" flag. 
(The code, as contributed to us, didn't include support except in the
code to write libpcap files.)

If you want to use Network Monitor to read capture files (although:

	our NFS dissector is massively better than theirs;

	I don't think they even *have* an iSCSI dissector;

	even our CIFS dissector is at least competitive, as of 0.9.0,
	and may well be better in a number of places)

you can save it in libpcap format and then use editcap to convert it to
Network Monitor format.