On Sun, 6 Sep 1998, Gilbert Ramirez Jr. wrote:
> I am reading the wish list that Gerald posted for ethereal and trying to
> list the things needed in a library to replace/enhance libpcap. One item on
> the list puzzles me:
>
> 5.The ability to read from multiple interfaces at once.
>
> I could understand the need for this in a non-interactive sniffer that
> monitors multiple networks and looks for problems, but what would it mean
> for ethereal, being an interactive program? Normally I use ethereal or
> other sniffers for scanning communications between two specific devices.
>
> Gerald, do you have an idea what the originator of this wish wanted?
> I guess it would make sense if you want to monitor all activity to a
> multi-homed server or something. Oooohhh... or would it be a really *great*
> feature for looking at traffic patterns on both sides of a firewall?
I think you've hit the nail on the head. As I recall, the originator
had several Linux boxes being used as routers.
He also wanted some sort of remote capture feature (aside from using
tcpdump and scp). This probably needs to be added to the wish list as
well.
---------------------------------------------------------------------------
***** ***** Gerald Combs gerald@xxxxxxxxxx
*** *** Mouse cleaning czar http://www.unicom.net
* * Unicom Communications, Inc. (913)327-5309
***** 7223 W. 95th St., Ste 325 (913)327-5376 Fax
*** Overland Park, KS 66212 (913)327-5375 Client Support
*
---------------------------------------------------------------------------
