TcpDump capture stops after few minutes. (Windows)

Question

I'm trying to capture all my networking with tcpdump.

I'm using tcpdump.exe -i {} -W 5 -C 10 -w capfile. After 10 mints (+-) the capture stopped for some reason, and tcpdump is still running.

Maybe there is a parameter for how much time to capture? I Know the -G parameter, but it's rotate the pcap files.

If someone know why it's happened and how can I fix that, to capture for unlimited time I will be grateful :)

I'm using tcpdump.exe on windows.

By the way, there is any way to use -i "eth0" on windows? Because on windows I need to check my interface number and use it like this -i "3".

Thanks.

Answer 1

-C 10 limits the size of the file to 10 MB.
After the first capfile file is full, numbered capfile files will be added.

-W 5 limits the number of these files to 5, after which it begins overwriting files from the beginning as a rotating buffer.

I believe tcpdump is still working, busily overwriting its five "capfile` files.

See : Manpage of TCPDUMP.