[ntar-workers] Stop capture without loosing packets

[Gianluca Varenni]

Hi.

I think you sent a mail to the wrong mailing list. This ml is about ntar, a new library to save and read network trace files. I suggest you to send your message to either the winpcap-users or the libpcap mailing list.

http://www.winpcap.org/contact.htm
http://www.tcpdump.org/#lists

Have a nice day
GV
  ----- Original Message ----- 
  From: Pelles, Noam 
  To: ntar-workers at winpcap.org 
  Sent: Monday, June 27, 2005 11:23 PM
  Subject: [ntar-workers] Stop capture without loosing packets


  Hi , 

  Is there any way of stop capture at a given time without loosing packets that already been captured ?
  I can always set a new filter expression that is not valid , but then I loose packets that already captured.
  I would like to implement like a Stop \ Start mechanism.

  Thanks

        __________________________________________________________________________________________
        This electronic message contains information from Verint Systems, which may be privileged and confidential. 
        The information is intended to be for the use of the individual(s)or entity named above. 
        If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. 
        If you have received this electronic message in error, please notify us by replying to this email (1).

       



------------------------------------------------------------------------------


  _______________________________________________
  ntar-workers mailing list
  ntar-workers at winpcap.org
  https://www.winpcap.org/mailman/listinfo/ntar-workers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/ntar-workers/attachments/20050628/ac622a41/attachment.html