Capture triggers

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Capture triggers

If you create capture triggers, Network Monitor can respond to events on your network. By default, no trigger is set.

Types of triggers

Network Monitor can detect how full your capture buffer is, and whether a specific pattern appears in a captured frame. You can create capture triggers that depend on either or both of these criteria.

If you specify a trigger that depends on a specific pattern appearing in a captured frame, Network Monitor performs the action you specify when it detects a frame that contains the pattern you specify. The pattern can be an ASCII string or a hexadecimal string. You can also specify a trigger which depends on a specific pattern appearing in a captured frame and a certain percentage of the capture buffer being filled. You can also specify whether Network Monitor should start its search at the beginning of each frame, after the end of the header of each frame, or some number of bytes after either of these locations. By default, Network Monitor searches the entire frame for the pattern.

Trigger actions

You can choose one of the following actions to occur when the trigger criteria are met:

  • The computer beeps.

  • Network Monitor stops capturing frames.

  • A command that you specify runs.

    To specify a command that starts a program, type the path and the name of the program file, or click Browse and navigate to the program file. To use an MS-DOS command, such as copy, type CMD /K, and then type the command.