Tuesday, 6 August 2013

WireShark: Only buffer the last 10 000 packets

WireShark: Only buffer the last 10 000 packets

I am using WireShark to keep an eye on the traffic on two 10G ports, in
real time. The problem is that there is so much traffic coming through the
two ports that WireShark crashes within a minute.
Is there a way for WireShark to only buffer a small number of packets (say
the 10 000 most recent), and discard anything previously captured?

No comments:

Post a Comment