Start time for a packet capture

Question

I have a device that resets every night at 8:05. I would like to setup wireshark to start capturing at 8:03 every night and capture for 3 minutes. I have found where to stop the capture but am looking for where to set the option to start capturing at a certain real time? Thanks for your help

Answer 1

You will need to schedule it with task scheduler or cron.

Answer 2

and then invoke a little script that starts wireshark for you, like so:

ECHO Starting up tshark with capture options
path=C:\Program Files\Wireshark
mkdir D:\NoBackup\WIRESHARK

set subor=D:\NoBackup\WIRESHARK%COMPUTERNAME%%DATE:/=%%TIME:~0,2%-%TIME:~3,2%-%TIME:~6,2%.pcap
C:\Progra~1\Wireshark\tshark.exe -i 1 -a filesize:250000 -w "%subor%"

see if that works for you..