When I want to capture a very large amount of traffic, I usually set up for multiple files(10-20), buffer size of 64meg, new file every 64meg and ring buffer of up to 10 files.
Is this the best configuration? Does anyone have rules of thumb? Occasionally WS crashes in extended captures, even with much smaller parameters. Chet
_______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
