Hi,
We have numerous bugs and questions about wireshark crashing which looks
like they are out-of-memory crashes.
Would it be feasible to add functionality to run dumpcap from the GUI
waiting to read the file in until the capture
stops, possibly updating the status bar while the capture is running?
This would correspond to starting a live capture without updating the
packet list in real time I suppose.
It would also be what the user probably wants in the case of using ring
buffers or multiple files.
Regards
Anders