Microsoft KB Archive/101003
INF: Stop Sniffer Trace Automatically when Server Fails
PSS ID Number: Q101003 Article last modified on 07- 7-1993
Summary: A common problem we encounter when trying to capture network traces at the time of server failures is that often nobody is there to notice and stop the Sniffer. Following is one possible method to automatically trigger a Sniffer on server failure.
More Information: This method involves running a batch file on one machine that repeatedly attempts to establish a connection to the server(s) in question. Upon detecting a failure at the server, the batch file sends a broadcast message (STOP THE SNIFF) to the domain, which the sniffer triggers on. The batch file: rem USAGE: stopsnif [servername] [interval] :start