Wireshark Ring Buffer settings from Command line

edit

A couple questions:

• What happens when you specify an interface with -i "the interface"?
• Why do you want to change the duration mid-capture?
• To understand whether you should be doing something differently, what are you trying to do now?

My use case: Wireshark launched with vanilla settings and left with a running capture will eventually use all available system resources, which is especially bad for production servers. To prevent this I've been using the ring buffer which periodically clears memory, but setting up the ring buffer at each launch of the application is tedious at best. Since Wireshark doesn't remember settings I want to include ring buffer settings on the command line.

When I use the -i option and the -b options I receive the same problem.

These same -b options work as expected in TShark. So it seems natural that they should work for Wireshark too.