Revision history  [back]

My system is uploading something to someone 2 minutes straight upon startup.

I want to track the start of it.

I'm already running a bat on startup, that starts tracking all interfaces immediatly.

"C:\Program Files\Wireshark\wireshark" -i 1 -i 2 -i 3 -i 4 -i 5 -k

Problem is that wireshark takes some time to start.

My next thought was to disconnect the cable or deactivate the adapter in the settings for the interface, then start tracking upon connecting it.

Is there a way to start wireshark quickly to capture everything send and received from startup?

Or is there a way to connect the interface after wireshark is running and then start tracking as soon as possible?

Also wireshark seems to terminate immediatly if the interface number doesn't exist, and newly connected interfaces don't appear on the back of

wireshark -D

but instead in the possition they would be in later. So I can't just spam wireshark -i 5 -k to track the interface relatively quickly.