Wireshark · Wireshark-dev: [Wireshark-dev] Questiong regarding Wireshark

[ksiva <ksiva@xxxxxxxxx>]

Hi there,

[1] Is there a way to run a script that will monitor the packets and look for a specific event to happen (say sequence number of the packet or src/dest is unreachable - packet type) and command the wireshark to stop capturing (perhaps N seconds after the event occured).

(Similar to what procomm plus offers a script to monitor a serial port console output.) 

i.e. A trigger to stop capture.

[2] A way to auto-flush and auto-start-capture after M packets.


Thanks,
Siva