Is it possible to set a time for a capture to start and then use the "Stop capture automatically" feature? asked 13 May '15, 07:12 PWR MAD edited 13 May '15, 07:18 |
One Answer:
No, not within the GUI version of Wireshark. But you can use dumpcap and the scheduler of your OS (windows scheduler, Unix cron, etc.) to start the capturing process. To stop the capturing process you can use the scheduler to kill the dumpcap process, or the built-in functionality of dumpcap to stop the capture process after some time. See option -a duration: Regards answered 13 May '15, 07:29 Kurt Knochner ♦ |
Excellent, thank you.
I converted your answer to a comment, as that's how this Q&A site works. Please see the FAQ.
Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).