Revision history  [back]

Consider capturing externally, i.e. use a switch that has a mirror or span mode and the capture can be started on the mirror port before the target machine is started.