This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Schedule a capture

0

Is it possible to set a time for a capture to start and then use the "Stop capture automatically" feature?

asked 13 May '15, 07:12

PWR%20MAD's gravatar image

PWR MAD
6114
accept rate: 0%

edited 13 May '15, 07:18


One Answer:

1

No, not within the GUI version of Wireshark. But you can use dumpcap and the scheduler of your OS (windows scheduler, Unix cron, etc.) to start the capturing process. To stop the capturing process you can use the scheduler to kill the dumpcap process, or the built-in functionality of dumpcap to stop the capture process after some time.

https://www.wireshark.org/docs/man-pages/dumpcap.html

See option -a duration:

Regards
Kurt

answered 13 May '15, 07:29

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Excellent, thank you.

(13 May '15, 07:30) PWR MAD

I converted your answer to a comment, as that's how this Q&A site works. Please see the FAQ.

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).

(13 May '15, 07:31) Kurt Knochner ♦