Ethereal-dev: Re: [Ethereal-dev] Newbie : How to pass my self generated packets to ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Bill Studenmund <wrstuden@xxxxxxxxxxxxxxxxx>
Date: Thu, 23 May 2002 09:34:33 -0700 (PDT)
On Thu, 23 May 2002, Prasenjit Chakraborty wrote:

> I have a Linux box. But I don't think ethereal supports reading from a
> FIFO or a PIPE, does it?

Well, to be honest, if Guy said Ethereal can do it, I suspect Ethereal can
do it. :-)

Note also he said "named pipe", not a pipe. They are slightly different.

> >If your packet capture application can write packets in libpcap format
> >to a UNIX named pipe file, then all you need to do with the Ethereal
> >source code on a UNIX system is to compile it.  If you create a named
> >pipe file:
> >
> >	mknod p /tmp/ethereal-pipe
> >
> >and run your program and make it write to the "/tmp/ethereal-pipe" file,
> >and then start an Ethereal capture and specify that the "Interface" is
> >"/tmp/ethereal-pipe", Ethereal should read from that pipe, reading
> >packets as your program writes them to that pipe.

Guy, "tcpdump .... -w /tmp/ethereal-pipe" would be an example capture
program, wouldn't it? Oh, make that "tcpdump ... -l -w /tmp/ethereal-pipe"
so that we get packets in real time.

Take care,

Bill