http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2275
Summary: "Finished writing file" notification in ring-buffer
mode.
Product: Wireshark
Version: 0.99.6
Platform: PC
OS/Version: Linux
Status: NEW
Severity: Enhancement
Priority: Low
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: martin@xxxxxxxxx
Build Information:
TShark 0.99.6
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.1, with libpcap 0.9.7, with libz 1.2.3.3, with libpcre
7.4, without Net-SNMP, with ADNS, without Lua, with GnuTLS 1.6.3, with Gcrypt
1.2.4, with MIT Kerberos.
Running on Linux 2.6.22-14-rt, with libpcap version 0.9.7.
Built using gcc 4.1.3 20070929 (prerelease) (Ubuntu 4.1.2-16ubuntu2).
--
I'm using tshark in a probe-type appliance, and I want the probe to capture
into a circular buffer, and to copy the files making up the buffer to an
analysis station . The circular buffering works perfectly, no problems, but I'm
finding it difficult to come up with a method of deciding when to upload, and
what file to upload.
I'd like to be able to do this:
tshark -i eth0 -b 20 -a filesize:10000 -q -w buffer.dmp --show-filename
and have tshark print
Finished writing to buffer-01.dmp
Finished writing to buffer-02.dmp
etc,etc
T'would be easy then.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.