To all those packet jockeys out there, I can feel the pain when you forget to save that critical trace file, or the pc crashes, or your cat walks across your keyboard.
Many times when capturing packets, you may even forget to save the trace and caught in that hypnotic pattern of stop/start capture/continue without saving.
Sure you can set up a ring buffer, but what if you only want one file?
Here’s a simple tip so you can provide the filename in advance and when you hit stop capture, the file is automatically saved.
I can’t guarantee that it will save the file if you PC or Wireshark crashes, but its still worth a shot.