Ethereal-users: Re: [Ethereal-users] Run Ethereal as a Windows Service

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 07 Aug 2005 19:12:10 -0700
Chris Alton wrote:

Having it run with no user logged on is exactly what I need. I have a
server machine that I want to start sniffing packets as soon as the
computer starts up. I want the exact functionality that tethereal has
except I want it with a non-visual interface. i.e. no command window
displayed.

Perhaps more correctly stated as "with no user interface at all, i.e. no window displayed at all".

Do you really want the *exact* functionality that Tethereal has - that functionality includes the full ability to dissect packets, and all the taps to generate statistics - or do you just want something that captures and writes to a libpcap-format file?

I want to be able to pass the filters and other parameters to
it and have it start logging when the computer starts.

What mechanism would you use to pass those parameters to it? Presumably this would be done by running some application that would set the filters and other parameters, and either

1) it would stop doing whatever capturing it was doing at the time, and start with the new parameters - and would again use those parameters after a reboot

or

2) it would continue doing the capture it's doing at the time, with the parameters it was already using, but would use the new parameters after a reboot.