How to permanently set default options for ring buffer capture

I often use ring buffer capturing for long running tests, and I always set the "new file after 1 kbytes" to "100 mbytes", which involves a lot of clicking. Same thing for "use a ring buffer with 2 files" which I reset to 10. The capture section of the preferences dialog does not offer fields to store those values.

Is there a possibility to - just save the last used values for the future or - a preferences setting that I can use to preset the ring buffer capture options to useful values?

btw, the default values of "1kbyte" and "2 files" are not useful.

Regards Thomas

AFAIK there are no preferences that can be saved for the ringbuffer options. If you'd like the default values to be changed (I agree the current ones are not useful and merely function as an example) you would need to file an enhancement request on Bugzilla. You can add the request to have the last values saved in the preferences (which makes sense as most people will have a workflow they will repeatedly use).

For now, an option could be to create a script that uses dumpcap with your settings that you can start when you want to capture. It would have to contain something like:

dumpcap -i <interface> -b filesize:100000 -b files:10 -w <filename.pcapng>

Hope this helps!

18.5k

SYN-bit

answered 2019-05-28 09:55:08 +0000

edit flag offensive 0 remove flag delete link

Comments

Thanks, that's pretty much what my I expected / already knew. I will file a bug report.

THerrmann (2019-05-28 10:07:34 +0000) edit

For the record, the enhancement request is 15800

THerrmann (2019-05-28 11:01:32 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

How to permanently set default options for ring buffer capture edit

Comments

1 Answer

Comments