Ethereal-dev: Re: [Ethereal-dev] feature request
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
Guy,
Do you know if Ethereal is already looking at all received packets in real-time? I.e. it looks at packets even if the "Update list of packets in real time" option is off?
Ray
---------------------------------------------------------------------------------------------------------
The information contained in this electronic mail transmission is intended by INRANGE Technologies for the use of the named individual or entity to which it is directed and may contain information that is confidential or privileged. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or call the INRANGE Help Desk at 215-293-2811 so that the sender's address records can be corrected.
|
| Guy Harris <gharris@xxxxxxxxx>
10/11/2002 04:26 PM
|
To: Ray.Rizzuto@xxxxxxxxxxx
cc: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>, Ethereal Development List <ethereal-dev@xxxxxxxxxxxx>
Subject: Re: [Ethereal-dev] feature request |
On Fri, Oct 11, 2002 at 04:08:11PM -0400, Ray.Rizzuto@xxxxxxxxxxx wrote:
> I guess the same logic could be put into Ethereal, but it would require
> that Ethereal examine each packet as it is received.
As opposed to having libpcap examine each packet as it is received?
> Overall, I favor the capture logic being in libpcap since libpcap is
> optimized for examining packets in real time.
The only optimization involved in putting it into libpcap would be that
it wouldn't call the callback routine for the last packet.
> In addition, this seems to
> be a common facility that other users of libpcap could use.
Yes, although putting it into libpcap means that the facility would only
work if you have the latest version of libpcap, unless your application
did the capture-stop stuff itself if libpcap didn't support that
feature.
