Ethereal-users: Re: [Ethereal-users] Can you stop tethereal without using CTRL+C?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Wed, 28 Apr 2004 12:29:17 -0700 (PDT)
Stef said:
> http://www.sysinternals.com/ntw2k/freeware/pstools.shtml

If you're referring to "PsKill", note that it might be more like "kill
-KILL"/"kill -9" on UNIX; if so, doing that will *NOT* cause Tethereal to
exit cleanly, as the SIGKILL signal is intended to forcibly terminate
processes even if they're catching SIGTERM (you *cannot* catch SIGKILL).

This means that the capture file will probably *NOT* be written out
completely, and the last packet in the capture file will probably be
incomplete as there will be some data buffered inside Tethereal and not
yet written out (so packets after the last one written to the capture file
will be missing).

To cleanly terminate Tethereal on Windows, the equivalent of "kill
-TERM"/"kill -15" would be needed, i.e. a way to deliver a
signal/exception/whatever to the process so that the process can receive
that signal/exception/whatever and, in the handler, arrange to cleanly
terminate what it's doing and exit.