Wireshark-bugs: [Wireshark-bugs] [Bug 655] Service parameter to ignore Windows logoff events
Date: Wed, 23 Dec 2009 09:00:34 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=655

Gerald Combs <gerald@xxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |gerald@xxxxxxxxxxxxx

--- Comment #6 from Gerald Combs <gerald@xxxxxxxxxxxxx> 2009-12-23 09:00:33 PST ---
It looks like this was fixed for dumpcap in r19624 back in 2006:

    /* Keep capture running if we're a service and a user logs off */
    if (capture_child || (dwCtrlType != CTRL_LOGOFF_EVENT)) {
        capture_loop_stop();
        return TRUE;
    } else {
        return FALSE;
    }

TShark doesn't handle CTRL_LOGOFF_EVENT but IMO that's a good thing. Dumpcap is
much more suited for running as a service.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.