http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1875
------- Comment #1 from jeff.morriss@xxxxxxxxxxx 2007-09-28 14:19 GMT -------
Wireshark/tshark never flush the output file.
The "-l" option actually means "flush *standard* output after each packet"
though the help text doesn't tell you so.
It probably works on *NIX because the OS will periodically flush the (buffered)
output to disk. Maybe Windoze doesn't do that or does it (much) less often?
That being said, I'm not sure what we should do:
1) just update the help text for "-l" as above?
2) make "-l" flush the file output too?
3) what about dumpcap (which I'd suggest you use instead of tshark for the kind
of capturing you're doing)?
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.