On Wed, Sep 01, 1999 at 10:04:37AM -0500, Daniel Ryde wrote:
>
>
> Ah, stupid me... Sorry about that. But I must admit it is a bit confusing
> as you say.
We intend to do two things about this. We'd like to move packet capturing
from libpcap to wiretap. Once we do that, we can control the filter
language. Secondly, we want to provide a GUI for creating filters. The
GUI would allow users to forget about the underlying filter syntax.
> Umm, tricky when there are few packages (or none at all, filterd out for
> example)... The application seems to freeze when no packages arrives, and
> I can't stop the capture until atleast one package gets trough.
> For example: enter the capture filter "port 0", and try to stop it.
Yes, the linux libpcap has problems with timeouts when no packets arrive.
See the "README.linux" file for a fix which requires patching and
re-compiling libpcap.
--gilbert
