Revision history [back]

Use the -a autostop parameter, e.g.

tshark -i 1 -w test.pcap -a duration:60

To stop after 60 seconds. See the manpage (or the -h output) for tshark for more info.