Ethereal-dev: Re: [ethereal-dev] Changes/Suggestions...?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: guy@xxxxxxxxxx (Guy Harris)
Date: Mon, 22 Mar 1999 15:41:44 -0800 (PST)
> BTW, how does ethereal avoid sniffing it's own DNS packets from reverse
> DNS lookups? I'm interested in how this is done.

It does so by not doing reverse DNS lookups while it's capturing
packets (given that it doesn't display the packets as they're coming
in).

> 5) BUG: If I don't enter a filename in the 'begin capture' dialog box,
> why do I lose my data? (using ethereal 0.5.1.)

Because Ethereal, instead of giving an error if no save file name was
specified, just doesn't bother opening a file to which to save the
packets, and because, if there's no file open, it just discards the
packets, rather than saving them to a temporary file, or storing them in
memory.

(I don't consider the above to be a feature; "tcpview", for example,
saves to a temporary file.)