On Thu, Nov 06, 2008 at 10:39:32AM -0700, Al Aghili wrote:
> When we run tshark on windows it sometimes creates these large files
> in Windows/temp directory that start with "ether". Is there a way to
> turn this off?
These files are used for temporarily storing captured data for the
session that you run tshark for. They should be deleted when tshark is
closed and able to quit gracefully. They cannot be turned off. What
version of tshark/Wireshark are you using? How are you stopping tshark?
Steve