aboutsummaryrefslogtreecommitdiffstats
path: root/doc/tshark.pod
diff options
context:
space:
mode:
authorSake Blok <sake@euronet.nl>2017-06-27 22:04:33 +0200
committerSake Blok <sake.blok@SYN-bit.nl>2017-07-03 16:41:37 +0000
commit3803e00367413260cbb543c3c4ed13ae2d8fd194 (patch)
treee96b7c81846caec9343201ea80e8afeee68dc80c /doc/tshark.pod
parent2c58ed569ed0c096d5640fd0da5825bcfef04aeb (diff)
Add option to use wall-clock intervals
Add the "interval" option to "-b". Each new capture starts at the exact start of a time interval. For instance, using -b interval:3600 will start a new capture file at each whole hour. Changed the duration option in the GUI interfaces to use the new interval option. Change-Id: I0180c43843f5d2f0c2f50153c9ce42ac7fa5aeae Reviewed-on: https://code.wireshark.org/review/22428 Petri-Dish: Anders Broman <a.broman58@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Sake Blok <sake.blok@SYN-bit.nl>
Diffstat (limited to 'doc/tshark.pod')
-rw-r--r--doc/tshark.pod11
1 files changed, 7 insertions, 4 deletions
diff --git a/doc/tshark.pod b/doc/tshark.pod
index 9cde4e4fea..664851bafe 100644
--- a/doc/tshark.pod
+++ b/doc/tshark.pod
@@ -209,6 +209,9 @@ where I<key> is one of:
B<duration>:I<value> switch to the next file after I<value> seconds have
elapsed, even if the current file is not completely filled up.
+B<interval>:I<value> switch to the next file when the time is an exact
+multiple of I<value> seconds
+
B<filesize>:I<value> switch to the next file after it reaches a size of
I<value> kB. Note that the filesize is limited to a maximum value of 2 GiB.
@@ -216,10 +219,10 @@ B<files>:I<value> begin again with the first file after I<value> number of
files were written (form a ring buffer). This value must be less than 100000.
Caution should be used when using large numbers of files: some filesystems do
not handle many files in a single directory well. The B<files> criterion
-requires either B<duration> or B<filesize> to be specified to control when to
-go to the next file. It should be noted that each B<-b> parameter takes exactly
-one criterion; to specify two criterion, each must be preceded by the B<-b>
-option.
+requires either B<duration>, B<interval> or B<filesize> to be specified to
+control when to go to the next file. It should be noted that each B<-b>
+parameter takes exactly one criterion; to specify two criterion, each must be
+preceded by the B<-b> option.
Example: B<-b filesize:1000 -b files:5> results in a ring buffer of five files
of size one megabyte each.