It would be nice if Ethereal provided a feature for doing this.
The way I do it is set up tethereal to capture data in a ring buffer. And
then I set up another tethereal and grep its output for the packet of
interest and then send a kill -TERM to the tethereal capturing data in ring
buffer.
Also, I have written expect scripts to look for a condition on one machine
and then log into the machine capturing data with tethereal and send a
kill -TERM PID to stop the capture gracefully.
----- Original Message -----
From: "Michael Hüttig" <Michael.Huettig@xxxxxxxxxxxxxxxxxxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Sent: Tuesday, August 26, 2003 1:48 AM
Subject: [Ethereal-users] stop capturing on condition
> Hi all,
> is it possible, to stop capturing after a condition?
>
> We'r having some problems with switches, which reboot sometimes, so i want
to
> capture in a ringbuffer and after sending out bpdu-packets with
> topology-change-flag i want to stop capturing for further analysis of
> traffic, which causes switch-reboot.
> --
> thanks for your help
>
> Michael
>
>
>
> **********************************************************************
> Diese E-Mail wurde auf Viren ueberprueft.
> www.mimesweeper.com
> **********************************************************************
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
