[R Ranjith kumar <r.ranjithme@xxxxxxxxx>]

Hi all

I want to know how to set time in tshark
just i want to stop capture after some particular seconds

In tshark manual they are using -a option

==================================================================
  -a  <capture autostop condition>
          Specify a criterion that specifies when TShark is to stop writing to a capture file.  The criterion is of the
          form test:value, where test is one of:

 
          duration:value Stop writing to a capture file after value seconds have elapsed.
 
          filesize:value Stop writing to a capture file after it reaches a size of value kilobytes (where a kilobyte is

          1024 bytes). If this option is used together with the -b option, Wireshark will stop writing to the current
          capture file and switch to the next one if filesize is reached.
 
          files:value Stop writing to capture files after value number of files were written.


==================================================================

but it is confusing me


please help me....with some examples


-- 
Ranjith Kumar. R

   ("`-''-/").___..--''"`-._          
    `6_ 6  )   `-.  (     ).`-.__.`)  
    (_Y_.)'  ._   )  `._ `. ``-..-'   
  _..`--'_..-_/  /--'_.' ,'           
(il),-''  (li),'  ((!.-'