[Ethereal-users] Ring buffer issue with tethereal

["Cory Perry (SNL:434-951-7463)" <CPerry@xxxxxxx>]

I have run across and intersting issue with command line utility "Tetheral" when using (-b files:xxxx) ring buffers greater that 1024. (Used to keep a preset amount of historical data)

 

The number of files saves never exceeds 1024. If I set value to 2000 or 5000, again only 1024 files are kept, first file written is deleted, but file number will increase to set value of -b files:xxxxxx.

 

I have increased and decreased -a filesize:yyyyyy and -b files:xxxx (xxxx greater than 1024)

 

Here is test command: tethereal -a filesize:1 -b files:2000 -w c:\temp\capture\test1.cap

 

I am currently using the Windows version.

 

tethereal 0.10.13
Compiled with GLib 2.4.7, with WinPcap (version unknown), with libz 1.2.3,
with libpcre 6.3, with Net-SNMP 5.2.1.2, with ADNS.
Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based on libp
cap version 0.9[.x] on Windows XP Service Pack 2, build 2600.

 

 

 

David Cory Perry
Information Systems Security Officer
SNL Financial LC
434.951.7463 p
cperry@xxxxxxx