Wireshark-users: Re: [Wireshark-users] problem while making a logging over 30 days

From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 28 May 2009 11:09:58 +0200
On Thu, May 28, 2009 at 01:52:38AM -0600, Stephen Fisher wrote:
> On Thu, May 28, 2009 at 09:32:42AM +0200, Verschuere, Karel wrote:
> 
> > When making active the wireshark for logging, after 60 hrs wireshark 
> > stops with next failure message:
> 
> > GLib-ERROR **:gmem.c:172: failed to allocate 380620 bytes
> 
> > What could be the reason fors the stop ?  Aim is to make a logging 
> > over 30 days...
> 
> See: http://wiki.wireshark.org/KnownBugs/OutOfMemory
> 
> Look into using the command-line utility dumpcap for long-term capturing 
> without dissection.

You might also want to take a look at:
http://www.lovemytool.com/blog/2008/07/ostu_dumpcap.html

Which explains how you can use dumpcap to make captures for months in a
row.

Cheers,
    Sake