TShark 1.2.15, Oracle Enterprise Linux 6.5

By default, tshark will write its capture data to the /tmp directory. If you do not have a large /tmp and run tshark for a long period of time, you may find that /tmp gets filled up.

To tell tshark to write to a different directory, set the TMPDIR environment variable before starting it.

env TMPDIR=/scratch/