[Winpcap-users] Question about record to multiple files

[Tal Attaly]

Hi,

I'm familiar with wireshark, but i'm working on software which uses winpcap
for recording and parse the packets by itself, so i'm looking for a way to
do that with code.


2011/11/2 j.snelders <j.snelders at telfort.nl>

> Hi Tal,
>
> Wireshark
> http://www.wireshark.org/docs/wsug_html_chunked/ChCapCaptureOptions.html
> Go to:
> Capture | Options
>
> Section Capture File(s)
> File: define an outputfile
> Select:
> - Use multiple files
> - Next file every 25 megabyte(s)
> - Next file every 1 hour(s)
> Hit Start
>
>
> TShark
> http://www.wireshark.org/docs/man-pages/tshark.html
> tshark -i 3 -a duration:3600 -a filesize:25000 -a files:3 -w test-a.pcap
>
> Best regards
> Joke
> On Wed, 2 Nov 2011 19:58:23 +0200 Tal Attaly wrote:
> >Hi,
> >
> >How can i make an automatic 'split' of the recorded file, so the recording
> >will be saved in multiple files? (For example- start record to a new file
> >as soon as the current file exceeds 25 MB / 60 minutes past)
> >
> >Thanks a lot,
> >Tal
>
>
>
>
>
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20111102/09a885c3/attachment.html>