[prev in list] [next in list] [prev in thread] [next in thread]
List: wireshark-dev
Subject: Re: [Wireshark-dev] Tshark Temp files
From: Philip Heady <pheady () prolexic ! com>
Date: 2013-11-12 19:38:10
Message-ID: CAHxe=zZFE4ew7mJMMyHkJkM8qGmXm=EVhnUPagzhOWa54SiM_A () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/related)]
[Attachment #4 (multipart/alternative)]
Good afternoon:
I have a question about the temp files that wireshark/tshark creates in
/tmp/wiresharkXXXXX*.
In version 1.0.15 these temp files are not generated, however in version
1.2.15 they are, and we don't want any temp files left over. Nor do I want
to have to run a cron script to delete these daily.
Any idea why I am seeing this behavior in these two versions? They both
allow the -w flag, however we are not using this flag to control output to
file.
I see that we may need to use -b <caption ring bugger option> option which
should discard temp files once they fill up the buffer, and generate new
ones after.
So not sure why 1.0.15 is not creating tmp files, and why 1.2.15. Probably
due to a different pcap library.
If you could provide some insight or explanation on which version, and/or
commands to use that would be most appreciated. Should we upgrade to the
latest stable 1.10.x?
Thanks,
Philip H.
--
*Philip Heady *|
*Systems Engineer*
*Prolexic Technologies *| DDoS Attacks End Here.
p: +1 954 620 6002 ext. 1084
e: pheady@prolexic.com
1930 Harrison Street, Suite 403 | Hollywood, Florida 33020
www.prolexic.com
[Attachment #7 (text/html)]
<div dir="ltr"><div><div><div><div><div><div><div>Good afternoon:<br><br></div>I have \
a question about the temp files that wireshark/tshark creates in \
/tmp/wiresharkXXXXX*.<br><br></div>In version 1.0.15 these temp files are not \
generated, however in version 1.2.15 they are, and we don't want any temp files \
left over. Nor do I want to have to run a cron script to delete these daily. <br> \
<br></div>Any idea why I am seeing this behavior in these two versions? They both \
allow the -w flag, however we are not using this flag to control output to file. \
<br><br></div>I see that we may need to use -b <caption ring bugger option> \
option which should discard temp files once they fill up the buffer, and generate new \
ones after. <br> <br></div>So not sure why 1.0.15 is not creating tmp files, and why \
1.2.15. Probably due to a different pcap library.<br><br></div>If you could provide \
some insight or explanation on which version, and/or commands to use that would be \
most appreciated. Should we upgrade to the latest stable 1.10.x?<br> \
<br>Thanks,<br></div>Philip H.<br \
clear="all"><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><br>-- \
<br><div dir="ltr"><p \
style="margin:0px;color:rgb(34,34,34);text-transform:none;line-height:normal;text-inde \
nt:0px;letter-spacing:normal;font-style:normal;font-variant:normal;font-weight:normal;word-spacing:0px;white-space:normal;font-size-adjust:none;font-stretch:normal">
<span style="font-family:tahoma,sans-serif"><font><font color="#000000"><span \
style="color:rgb(0,32,96)"><span style="color:rgb(0,0,0)"><font><b>Philip Heady \
</b></font></span></span><span style="color:rgb(0,32,96)">|<span> \
</span></span></font></font><font><font color="#000000"><span \
style="color:rgb(0,32,96)"><span style="color:rgb(0,0,0)"><b>Systems Engineer<br> \
</b></span></span></font></font></span></p>
<p style="margin:0px;color:rgb(34,34,34);text-transform:none;line-height:normal;text-i \
ndent:0px;letter-spacing:normal;font-style:normal;font-variant:normal;font-weight:norm \
al;word-spacing:0px;white-space:normal;font-size-adjust:none;font-stretch:normal">
<font><span style="font-family:times new roman,serif"><font color="#000000"><font \
size="4"><b><img src="cid:3392436823_134978"></b></font></font></span></font></p><div><font \
size="1"><span style="font-family:tahoma,sans-serif"><span \
style="border-collapse:collapse"><span><span \
style="font-weight:normal"><b><span>Prolexic Technologies</span><span> \
</span></b><span style="color:rgb(105,94,74)"><span>| </span></span><span \
style="color:rgb(89,89,89)"><span>DDoS Attacks End Here.</span></span><span> \
</span><div>
<span><span>p: <a value="+19546206002">+1 954 620 6002 ext. \
1084</a><br></span><span></span></span></div>
<div><span>e: <a href="mailto:pheady@prolexic.com" \
target="_blank">pheady@prolexic.com</a><span></span></span></div>
<div><span>1930 Harrison Street, Suite 403 </span><span>| </span><span>Hollywood, \
Florida 33020</span></div>
<div><span><span><a style="color:rgb(0,0,204)" href="http://www.prolexic.com/" \
target="_blank"><span \
style="color:rgb(0,0,0)"></span>www.prolexic.com</a></span></span></div></span></span></span></span></font></div></div>
</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
--001a11c1adca2150e504eafffded--
["image.jpg" (image/jpeg)]
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic