Well, the Ethereal capture dialog already has some (basic) stop triggers (such as "Stop after N packets"). Also, if you want to stop the capture after some upper layer protocol event then it should probably be done in Ethereal (in which those upper layer protocol events would be dissected) instead of libpcap...
You might want to start looking in "gtk/capture_dlg.c" for how the current stop triggers are implemented.
Regards, -Jeff
[EMAIL PROTECTED] wrote:
Hi!
I'd like to be able to define a start/stop capture trigger. I'd think the syntax would be the same as the capture filters. I don't know if this is an Ethereal enhancement and/or a libpcap enhancement.
Ray
---------------------------------------------------------------------------------------------------------
The information contained in this electronic mail transmission is intended by INRANGE Technologies for the use of the named individual or entity to which it is directed and may contain information that is confidential or privileged. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or call the INRANGE Help Desk at 215-293-2811 so that the sender's address records can be corrected.
-- Jeff Morriss Senior Support Engineer Ulticom, Inc. Helpdesk: +1-856-787-2765 Fax: +1-856-222-9947
