[TriLUG] OT: wireshark

Andrew Ball anball at gmail.com
Thu Jun 5 11:19:53 EDT 2008


You might want to look into some gui automation if you really can't
use the command line in windows.  I suspect that if you find the
executable used and run it from cmd that you might find that you can
run it from the command line though.

GUI automation is fun but error-prone.  Here's something that might work:

http://www.autoitscript.com/autoit3/

Peace,
Andrew

On Thu, Jun 5, 2008 at 11:08 AM, Greg Brown <gwbrown1 at gmail.com> wrote:
> More verboseness.
>
> I have, at my disposal, four Wireshark protocol analyzers that run Linux and
> two "backups" that run Windoze.  All my Linux boxes are out in the wild
> assigned to various problems and projects so I'm stuck with using a Windows
> based Wireshark.
>
> I see where, in the gui, I can stop a capture after a certain number of
> minutes but I don't see where I can start a capture at a scheduled time from
> the GUI.  So I was hoping for something GUI based as I have no idea how I
> would start a capture from the command line in XP.
>
> Greg
>
> On Thu, Jun 5, 2008 at 11:04 AM, Matthew Pusateri <
> mpusateri at wickedtrails.com> wrote:
>
>> Wireshark has a -a cmdline argument that specifies when to stop the
>> capture.  So you should be able to crank up wireshark from the command
>> line.  Or possibly use tshark if no gui.  Not sure if that helps
>> answer your question, as I'm not sure what your trying to achieve.
>> Maximum verbosity please.
>>
>>
>> Matt P.
>>
>>
>> On Jun 5, 2008, at 10:55 AM, Greg Brown wrote:
>>
>> > Does anyone know of a way to schedule a wireshark start and stop
>> > capture the
>> > way you can with a "real" sniffer?
>> >
>> > Greg
>> > --
>> > TriLUG mailing list        :
>> http://www.trilug.org/mailman/listinfo/trilug
>> > TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>
>> --
>> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
>> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>



-- 
=======================
Andrew D. Ball
勃安
deus caritas est
http://wwwx.cs.unc.edu/~adball/blog/
http://filebox.vt.edu/~anball1/
http://www.trilug.org/


More information about the TriLUG mailing list