Revision history  [back]

I'd do this by running dumpcap.exe instead of Wireshark (which uses dumpcap.exe to capture anyway). You can run it with the same parameter set each time, writing to the same file like this:

dumpcap -i 0 -w d:\temp\capture.pcapng

The "-i" parameter specifies the index of the capture interface. You can get a list with

dumpcap -D