Learned about dumpcap

A more efficient way to capture network traffic than running the heaver Wireshark Gui program. Of course you later use Wireshark to look at this data.

Dump packets to a filename appended with a seq # and time info. Cycle through 10, 5000 byte files overwriting the oldest…

dumpcap -i 1 -w ~/packets/sample.pcapng -b filesize:5000 -b files:10

Dump to packets to a filename appended with a seq # and time info. Cycle through 10, 5000 byte files overwriting the oldest.