How to Schedule a Packet Capture
search cancel

How to Schedule a Packet Capture


Article ID: 48875


Updated On:


CA Application Delivery Analysis MTP (NetQoS / ADA) CA Infrastructure Performance CA NetVoyant (NetQoS / NV) CA eHealth


Packet captures can be scheduled using Wireshark's command line tool - tshark. To schedule a capture,
add a line such as the following to a batch file and call the file using a Windows scheduled task.

c:\"Program Files"\Wireshark\tshark -a duration:60 -B 2 -i 4 -n -q -w c:\network.out host

-a = duration in seconds
-B = buffer size - default is 1Mb
-i = interface number - use "tshark.exe -D" to list interface numbers and find the right interface to capture on
-n = don't resolve IP addresses
-q = quiet output
-w = output file
host = host capture filter


Release: RAIB1H99000-9.1-Network Flow Analysis-Interface Bundle-Hardware