time limit for tshark capturing

asked 2018-08-01 15:39:23 +0000

This post is a wiki. Anyone with karma >750 is welcome to improve it.

I am using tshark to capture my network traffic and I want to limit the measurement time.

Tshark runs in a bash script to automatise the measurement, just like this:

tshark -i 1 -w test.pcap

Now I want to stop the measurement after X seconds.

How can I do that?

1 Answer

Sort by » oldest newest most voted

Use the -a autostop parameter, e.g.

tshark -i 1 -w test.pcap -a duration:60

To stop after 60 seconds. See the manpage (or the -h output) for tshark for more info.

Thanks, that's exactly what I wanted to do!

jjulianf ( 2018-08-02 07:46:39 +0000 )edit

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 follower

Asked: 2018-08-01 15:39:23 +0000

Seen: 4,480 times

Last updated: Aug 01 '18