["Guy Harris" <gharris@xxxxxxxxx>]

Stef said:
> http://www.sysinternals.com/ntw2k/freeware/pstools.shtml

If you're referring to "PsKill", note that it might be more like "kill
-KILL"/"kill -9" on UNIX; if so, doing that will *NOT* cause Tethereal to
exit cleanly, as the SIGKILL signal is intended to forcibly terminate
processes even if they're catching SIGTERM (you *cannot* catch SIGKILL).

This means that the capture file will probably *NOT* be written out
completely, and the last packet in the capture file will probably be
incomplete as there will be some data buffered inside Tethereal and not
yet written out (so packets after the last one written to the capture file
will be missing).

To cleanly terminate Tethereal on Windows, the equivalent of "kill
-TERM"/"kill -15" would be needed, i.e. a way to deliver a
signal/exception/whatever to the process so that the process can receive
that signal/exception/whatever and, in the handler, arrange to cleanly
terminate what it's doing and exit.