Ethereal-users: Re: [Ethereal-users] rate threshold capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Next Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 1 Feb 2004 10:38:19 -0800
On Sat, Jan 31, 2004 at 09:41:39PM -0600, Burdick, Joseph wrote:
> I would like to trigger a capture based on a bits per second or
> packets per second threshold.  I have searched the web for a few weeks
> to no avail, and I couldn't find anything in the tcpdump man page that
> would help.

That's because there's no way to do that in Ethereal or tcpdump itself.

Perhaps somebody's constructed some way to start a capture program based
on a threshold such as that, e.g. a way to start a command if a network
traffic rate goes above a certain level.  If so, that could be used to
start tcpdump, Tethereal, or Ethereal (yes, you can start an Ethereal
capture from the command line - see the "-k" flag).

I don't of any such way myself, however.