Wireshark · Ethereal-users: Re: [Ethereal-users] How to schedule Ethereal?

[Guy Harris <gharris@xxxxxxxxx>]

Garmon, Timothy wrote:
> Is there a way that I can Schedule Ethereal to start in the morning and stop
> in the evening through a batch or something?

If you start it at time T, and want it to stop at time T plus N hours, 
try running Ethereal with the option "-a duration:{N*3600}", where 
"{N*3600}" is the numerical value of N times 3600 (the duration is in 
units of seconds).

> A scheduled Task only starts the program, but I need it to start analyzing
> also.

If you run it in that fashion, it'll stop after the specified number of 
seconds, and then try to read in the file it captured and dissect it.

I say "try" because if the file is large enough, it could run out of 
virtual memory trying to read it.