Ethereal-dev: Re: [Ethereal-dev] Display filter as stop condition

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Fri, 24 Oct 2003 14:29:41 -0500 (CDT)
On Fri, 24 Oct 2003 sford@xxxxxxxxxxxxx wrote:

> I've added a "Halt" feature to tethereal that uses a display filter as
> a stop condition.  It is supplied as a string argument to "-H".  It
> can be very useful for troubleshooting to see what led up to a
> particular condition (kindof like setting a breakpoint with an
> emulator).  Combined with ring buffer, you can just start it, come
> back the next morning and have a good snapshot.

Cool!  Someone asked about this at a talk I was giving on Tethereal this
morning; they'll be happy to hear about this.

BTW, why did you add another flag (-H) instead of adding another autostop
condition to "-a", e.g. "-a filter:xxxxx"?