User Guide

Capturing Live Network Data
65
Sampling option None This option instructs the Remote Packet Capture Protocol service
to send back all captured packets which have passed the capture
filter. This is usually not a problem on a remote capture session with
sufficient bandwidth.
Sampling option 1 of x packets This option limits the Remote Packet Capture Protocol service to
send only a sub sampling of the captured data, in terms of number
of packets. This allows capture over a narrow band remote capture
session of a higher bandwidth interface.
Sampling option 1 every x
milliseconds
This option limits the Remote Packet Capture Protocol service to
send only a sub sampling of the captured data, in terms of time.
This allows capture over a narrow band capture session of a higher
bandwidth interface.
4.9. The "Interface Details" dialog box
When you select Details from the Capture Interface menu, Wireshark pops up the "Interface Details"
dialog box as shown in Figure 4.11, “The "Interface Details" dialog box”. This dialog shows various
characteristics and statistics for the selected interface.
Microsoft Windows only
This dialog is only available on Microsoft Windows
Figure 4.11. The "Interface Details" dialog box
4.10. Capture files and file modes
While capturing, the underlying libpcap capturing engine will grab the packets from the network card and
keep the packet data in a (relatively) small kernel buffer. This data is read by Wireshark and saved into
the capture file(s) the user specified.