Hi,
Some problems i found after trying out ethereal 0.7.5:
- The -w parameter does not seem to apply if i start a capture session
from the GUI. Having the capture go to /tmp by default is not preferable
in my opinion, since it usually resides on a small partition of it's own,
or the small root partition, or sometimes (on Solaris for example) in the
swap & virtual memory space. Perhaps add a "capture file" field in the
Capture Preferences dialog, defaulting to an unused filename in the
current directory, or the file specified on the command line using -w?
(I got around this by setting the TMPDIR environment variable, after
browsing through the source checking how you choose the file name.)
- To utilize the -w i tried the new command line capture feature:
root@funk:/opt/src/net/ethereal-0.7.5#> ./ethereal -w /data/eth/foo -i
eth0 -k
got me a warning window saying
"The file to which the capture would be saved ("/data/eth/foo") could
not be opened: Bad file descriptor."
/data/eth is an existing, writable directory. /tmp/foo didn't work
either.
- After capture, while going through the capture file, ethereal tries to
resolve all the IP addresses to names. How about adding an option (in the
capture dialog, and the default setting in the preferences dialog) for
disabling this behaviour? It takes a *long* time to resolve a large number
of internet addresses (say, for a large dump of web traffic off a
web/proxy/dialup server).
And then, perhaps, an easy way to do resolving for them later in display
mode (for example, double click an IP would cause resolving it and
replacing the IP with the name in all occurrences, and perhaps a button to
resolve all addresses).
- I added a display column (preferences/columns), how do i make ethereal
redraw the display with the new column shown, without restarting ethereal
(saving the capture to another file and reopening it didn't help)?
Re-entering a (null) display filter seems to cause a redraw, but without
the column inserted.
I tried ethereal 0.7.5 on an RH6 system (i686), with gtk+ 1.2.3, libpcap
0.4, ucd-snmp 3.6.1.
- Hessu
