The interface name or the number can be supplied to the -i flag to specify an interface on which to For each network interface,Ī number and an interface name, possibly followed by a text description of the interface, is printed. D Print a list of the interfaces on which Wireshark can capture, and exit. Start with the given configuration profile. Set the maximum number of packets to read when capturing live data. UNIX systems with earlier versions of libpcap. This is available on UNIX systems with libpcap 1.0.0 or later and on Windows. Note that, while Tshark attempts to set the buffer size to 1MB byĭefault, and can be told to set it to a larger value, the system or interface on which you'reĬapturing might silently limit the capture buffer size to a lower value or raise it to a higher If you encounter packet drops while capturing,
Packet data until that data can be written to disk. This is used by the the capture driver to buffer Set capture buffer size (in MB, default is 1MB). When the first capture file fills up, Wireshark will switch writing to the In "multiple files" mode, Wireshark will write to Writing to the current capture file and switch to the next one if filesize is reached.įiles: value Stop writing to capture files after value number of files were written.Ĭause Wireshark to run in "multiple files" mode. If this option is used together with the -b option, Wireshark will stop
TheĬriterion is of the form test : value, where test is one of:ĭuration: value Stop writing to a capture file after value seconds have elapsed.įilesize: value Stop writing to a capture file after it reaches a size of value kilobytes (where a Specify a criterion that specifies when Wireshark is to stop writing to a capture file.
0 kommentar(er)
