[Winpcap-users] Pcap File Location

[Guy Harris]

On Jul 26, 2011, at 7:32 AM, Emre Erişgen wrote:

> Is there a way to change the path for saving pcap file? 

Change the path *where*?

In WinPcap, you specify the path for saving a pcap file in the pcap_dump_open() call; to change the path, change the string you pass as the second argument.

In WinDump, you specify the path for saving a pcap file in the "-w" argument to the command; to change the path, change the argument you supply to "-w".

In dumpcap and TShark, the answer is the same as with WinDump.

In Wireshark, you can either start the capture from the command line, in which case the answer is the same as with WinDump, or you start it from the GUI, in which case you either specify the path in the "Capture Options" dialog or specify it when you save the capture.

In other programs, well, it depends on what the other program lets you do.