Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Run Wireshark as Admin-Service during Start-up

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "hans.loepfe" <hans.loepfe@xxxxxxxxxx>
Date: Fri, 14 Jul 2006 22:58:58 +0200

Hi all

I am new here.
I'd like to seek advice for setting up Wireshark to run as a service (with
Admin rights) during start-up.
Possibly Wireshark should be up and running before the system initiates the
Network Interface.

I like to do this to find out what is sent over the cable during start-up.

OS: MS Windows Professional SVC Pack 2

So far I initiate Wireshark by issuing the following CL command:
  ->  c:\programme\wireshark\wireshark -i 2 -a duration:60 -w
c:\SamsungTrace.cap -k -Q

But of course by the time I am able to invoke this command the Network
interface is up and has been sending/receiving data over the wire already.
So it is not the solution to simply put this into a batchfile inside the
startup folder.

I believe starting a service would be a more effective way to accomplish
gathering data from the very begining. I just don't know how to create a
service that executes the command (or similar) posted above.

Guess there is a simple solution, I am just not aware of it.

Thanks for your comments, replies and suggetions to the solution.

Regards, Hans.


  • Prev by Date: Re: [Wireshark-users] cldap dissector problem
  • Next by Date: [Wireshark-users] Problem with card
  • Previous by thread: Re: [Wireshark-users] cldap dissector problem
  • Next by thread: [Wireshark-users] Problem with card
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation