Table of Contents
Advertisement
3.1.9. Capture Tab
ProfiShark can capture traffic without the need for third-party capture software. This Direct Capture is
performed at the driver level, prior to all network stacks and frame processing. Direct Capture provides the
best performance, enabling small packet capture at wire speed.
The Capture tab contains the controls for the Direct Capture feature. The captured data is saved to PCAP
Next Generation files (.pcapng) with hardware-generated packet timestamps. ProfiShark Manager also
provides an option for uploading capture files to Cloudshark.
Capture directory
File name pattern
Create a new file
automatically after
Stop after
Use a ring buffer with
Statistics
Specify the location where the capture files will be saved.
Specify the naming pattern for the capture files, where %N is the file number, %Y the
year, %M the month, %D the day, %H the hour, %m the minute, and %s the second.
Creates a new file when the specified time or file size is reached.
Stops the capture when the specified number of files is reached.
Overwrites the capture files when the specified number of files is reached.
Written to File: Performance statistics. Displays the amount of data currently written in
the output file, helping users determine the best buffer size.
Dropped: Dropped bytes. Indicates the amount of data dropped during the capture,
due to performance issues or buffer overflow.
43
Advertisement
Table of Contents
