Suppose I'm using Wireshark to monitor a broadcast storm. I want to find out the exact instant of time when the capture buffer runs out of memory. How do I monitor this and obtain the exact time moment when Wireshark capture buffer runs out of memory?
Wireshark: Analyzing Broadcast Storms
wireshark
Best Answer
If you are capturing to memory only and stopping when the buffer runs out, then in the case of a broadcast storm the last frame time will be when the buffer ran out of memory. I'm not sure why you'd want to do this instead of capturing to disk.