On 13 August 2012 19:15, Aaron Gray <aaronngray.lists at gmail.com> wrote: > I am wondering where wireshark stores its data before it is saved as a file ? /var/tmp or /tmp or $TMPDIR, see man wireshark for additional locations (specifically Capture:Options bit).