Ethereal-dev: Re: [Ethereal-dev] Display filter as stop condition

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Fri, 24 Oct 2003 14:29:41 -0500 (CDT)
On Fri, 24 Oct 2003 sford@xxxxxxxxxxxxx wrote:

> I've added a "Halt" feature to tethereal that uses a display filter as
> a stop condition.  It is supplied as a string argument to "-H".  It
> can be very useful for troubleshooting to see what led up to a
> particular condition (kindof like setting a breakpoint with an
> emulator).  Combined with ring buffer, you can just start it, come
> back the next morning and have a good snapshot.

Cool!  Someone asked about this at a talk I was giving on Tethereal this
morning; they'll be happy to hear about this.

BTW, why did you add another flag (-H) instead of adding another autostop
condition to "-a", e.g. "-a filter:xxxxx"?