Ethereal-dev: Re: [Ethereal-dev] feature request

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 11 Oct 2002 13:26:43 -0700
On Fri, Oct 11, 2002 at 04:08:11PM -0400, Ray.Rizzuto@xxxxxxxxxxx wrote:
> I guess the same logic could be put into Ethereal, but it would require 
> that Ethereal examine each packet as it is received.

As opposed to having libpcap examine each packet as it is received?

> Overall, I favor the capture logic being in libpcap since libpcap is 
> optimized for examining packets in real time.

The only optimization involved in putting it into libpcap would be that
it wouldn't call the callback routine for the last packet.

> In addition, this seems to 
> be a common facility that other users of libpcap could use.

Yes, although putting it into libpcap means that the facility would only
work if you have the latest version of libpcap, unless your application
did the capture-stop stuff itself if libpcap didn't support that
feature.