I have read in one of the mailing lists (Eth-dev) that stopping the capture on a condition had already been implemented (for tethereal). I have copied the header of one of the messages in the thread (below).
However, I have not found any indication that this feature is really available, at least up to version 0.10.0.
Does anybody know if stop capture on condition is acutally available, and if yes, what the syntax is? I would need to stop capturing on appearance of a certain kind of packet, to troubleshoot a network.
Thanks,
Ana
--------------------------------------------------
Subject: Re: [Ethereal-dev] Display filter as stop condition
* From: sford@xxxxxxxxxxxxx <mailto:[email protected]>
* Date: Tue, 28 Oct 2003 08:27:46 -0800 (PST)
New and improved! Now with scrubbing bubbles!
Still only for tethereal.
Usage:
tethereal -a "rfilter:STOP-RD-FILTER"
-----------------------------------------------