Revision history  [back]

I've already tried running wireshark on startup to track suspicious stuff happening on every startup.

Problem is that it takes a while for wireshark to start.

My new idea is to deconnect my lan cable or deactivate the adapter in windows.

Problem is that I would still have to manually start capturing for that interface.

Is there a way to capture a interface relatively quickly upon connecting to it?