On Sat, Jan 31, 2004 at 09:41:39PM -0600, Burdick, Joseph wrote:
> I would like to trigger a capture based on a bits per second or
> packets per second threshold. I have searched the web for a few weeks
> to no avail, and I couldn't find anything in the tcpdump man page that
> would help.
That's because there's no way to do that in Ethereal or tcpdump itself.
Perhaps somebody's constructed some way to start a capture program based
on a threshold such as that, e.g. a way to start a command if a network
traffic rate goes above a certain level. If so, that could be used to
start tcpdump, Tethereal, or Ethereal (yes, you can start an Ethereal
capture from the command line - see the "-k" flag).
I don't of any such way myself, however.