Ethereal-dev: RE: [ethereal-dev] Viewing packets while capturing...
>I noticed that top on your wishlist is to be able to view packets while
>capturing.
<...code deleted...>
>Arrange things so that your pcap dispatcher feeds the packets directly
>into your decoding and display routines, rather than via a file. (or use
>a pipe? But that seems unnecessarily messy...)
This threaded approach seems to be a good one. I fiddled around with "live
capture, but had the (known) problems with linux&pcap. There was a fix
discussed here sometime ago, but I have not had a chance to implement it
myself. I think I rather like the threaded concept better, though.
>
>To arrange display updates, set a gtk timer to run a display update
>every so often. Kill the timer when you stop capturing.
I think I'd prefer to see updates when there is new data, personally.
These should be easy to schedule. I suppose if the timer were fast enough
(<.5sec or so), it would be alright to use the timer.
--john
BTW, I am really impressed with the rate at which the development of
ethereal is progressing. It seems as though every time I start to work on
a change there are other ones in the tree... I really need to get some
time to dedicate to this. I spoke with Precision Guesswork about their
popular LanWatch product and porting it to Linux, but they felt that there
was not much of a market(!). An OpenSource solution is so much better
anyway.
-------------------------------------
Name: John McDermott
VOICE: +1 505/377-6293 FAX +1 505/377-6313
E-mail: John McDermott <jjm@xxxxxxxxxx>
Writer and Computer Consultant
-------------------------------------
