http://blogs.technet.com/b/networking/archive/2009/09/03/nm3eventcap-how-to-stop-a-network-capture-when-windows-logs-an-event.aspx&quot;I wish there was a way to run a Netmon capture for an extended time and to have it stop when a certain event is recorded in the event logs. I don't have the hard drive space for large captures that are many gigs in size. I only want to see the Netmonen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/networking/archive/2009/09/03/nm3eventcap-how-to-stop-a-network-capture-when-windows-logs-an-event.aspx#3279203Fri, 04 Sep 2009 16:31:55 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3279203João Carneiro<p>simply beautiful!</p> <p>Many thanks! This WAS a very common wish around here :)</p><div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3279203" width="1" height="1">