Wireshark-users: Re: [Wireshark-users] tshark vs dumpcap

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 30 Oct 2011 14:13:58 -0700
On Oct 30, 2011, at 2:02 PM, Marco Zuppone wrote:

> The official WireShark study guide states that dumpcap consumes less memory..

...because it doesn't dissect packets and keep any persistent data needed to do that.