Configuring a circular capture buffer
Circular buffer is an optional buffer type that, as the packet capture buffer fills, writes new packets to the end of the buffer and discards packets from the start of the buffer (i.e. first in, first out). This allows you to continually run a packet capture, as the buffer recycles itself.
To configure a circular capture buffer, complete the following steps:
1. On the Home tab, in the Capture group, click Configuration > Packet Capture.
2. Click the Settings button. The Packet Capture Settings window appears.
3. Ensure the Capture Options tab is selected.
4. Enable the Use Circular Packet Buffer setting.
A circular buffer also allows you to save the packet capture buffer to multiple, sequentially labeled files instead of overwriting a circular capture file. Some of the next steps describe how to enable that functionality.
5. Enable the Save Captured Packets to a File setting; type the maximum amount of disk space to be used for this purpose.
By design, as a circular capture buffer is filled/capped, the oldest packets are discarded to make room for the new, incoming packets. If, however, you want to save those oldest packets from being discarded, this option allows you to do so.
6. Enable the Create Multiple Sequential Files setting; type the maximum number of files to create this way.
This option causes Observer to write out a sequence of files rather than overwriting the file each time the buffer fills up.
7. Click OK to confirm and save your changes.