Wireshark-bugs: [Wireshark-bugs] [Bug 9816] Crash when temporary capture file fills up the file

Date: Fri, 28 Feb 2014 17:35:51 +0000

Comment # 7 on bug 9816 from
> We have to store either the raw packet or the parsed data. A raw packet is 
> usually ~1500 bytes. The complete parsed data for a single packet is (in my 
> experiments) usually around 25000 bytes. We only store the raw packet, since it > is much smaller.
I see. In this case will be useful button  that parse every packet in a saved
file, cut unparsed data and repacks the file (not in capture mode of course).

> It's very difficult to do consistently in a cross-platform way, and it is easy 
> enough to see how much space you have and set the options appropriately.
Understood

> Ring-buffer does not work with temporary files
It's a pity


You are receiving this mail because:
  • You are watching all bug changes.