Memory (RAM) reserved after using "Create a new file automatically"
When using the "Create a new file automatically" option with either the Bytes or seconds option (haven't tested the other options), the windows task manager shows that the RAM is still reserved, even after stopping the capture and closing wireshark. Only a system reboot helps, a log-off doesn't free the memory. Before starting the capture memory usage is around 4GByte. Same behavior when using dumpcap as standalone.
If you look the the timestamps of the wireshark generated files, you can see that the time is greater > 4 Seconds from time to time. Is the time option ignored?
No change in the behavior when using the ringbuffer. When the ringbuffer option is checked, no new files are created - Wireshark creates new files and doesn't delete the old ones. It looks like the ringbuffer option is ignored. Same behavior when using dumpcap as standalone.
The interface is a 10 Gbit/s one and traffic is around 7 to 8 Gbit/s.
Tested the SSD a bit and i am getting write speeds of > 6.4Gbit/s - So could it be that the SSD is too slow?
Steps to reproduce
Go to options - Output - Select create a new file automatically and checkthe after Byte option (doesn't matter if with or without after time option).
What is the current bug behavior?
Wireshark starts capturing data and after a few files (Can't tell if it's always the same amount of files, but can be around 5 to 6 files) the memory usage rises and won't be freed after closing/stopping the capture.
What is the expected correct behavior?
Memory usage should be [New file after X Bytes]*2 at max?
Version 3.2.5 (v3.2.5-0-ged20ddea) Copyright 1998-2020 Gerald Combs email@example.com and contributors. License GPLv2+: GNU GPL version 2 or later https://www.gnu.org/licenses/gpl-2.0.html This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) with Qt 5.12.8, with WinPcap SDK (WpdPack) 4.1.2, with GLib 2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 (closed) support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled resampler), with SBC, with SpanDSP, with bcg729. Running on 64-bit Windows 10 (1903), build 18362, with AMD Ryzen Threadripper 3970X 32-Core Processor (with SSE4.2), with 130948 MB of physical memory, with locale English_United States.1252, with light display mode, without HiDPI, with Npcap version 0.9994, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (19 loaded). Built using Microsoft Visual Studio 2019 (VC++ 14.26, build 28806).