HI Richard Sharpe
Good idea but the problem is that eversince we copied 0.8.11 we changed so
many files and included new files.Hence updating will be a little tough.
I have one more problem
If ring buffer has to work fine ethereal should be built with LIBZ but my
ethereal -v shows that it is not built with ZLIB and not with SNMP
I also seen libz.org site for information.
HOW CAN I COMPILE MY ETHEREAL with ZLIB... any compiler tags to be
changed?Source files to be changed?
Thanks in advance.
Ravi
-----Original Message-----
From: Richard Sharpe [mailto:rsharpe@xxxxxxxxxx]
Sent: Tuesday, October 29, 2002 12:39 PM
To: Mudium, Ravi Kumar (Ravi)
Cc: 'Guy Harris'; 'ethereal-dev@xxxxxxxxxxxx'
Subject: Re: [Ethereal-dev] RE: [Ethereal-users] NEED HELP
On Tue, 29 Oct 2002, Mudium, Ravi Kumar (Ravi) wrote:
> Hi Guy Harris
> It is very much useful information for my work.Thank you.
> But I have one doubt whether this ring buffer feature is available in
> ethereal 0.8.11 version. This is the version we are using.
> The recent version seems to be 0.9.7
Then why don't you update?
> Regards
> Ravi Kumar
>
> -----Original Message-----
> From: Guy Harris [mailto:guy@xxxxxxxxxx]
> Sent: Tuesday, October 29, 2002 2:16 AM
> To: Mudium, Ravi Kumar (Ravi)
> Cc: ethereal-dev@xxxxxxxxxxxx
> Subject: Re: [Ethereal-users] NEED HELP
>
>
> On Mon, Oct 28, 2002 at 09:25:23AM +0530, Mudium, Ravi Kumar (Ravi) wrote:
> > Hi I am trying to implement a circular file so that I can avoid any
crash
> of
> > ETHEREAL when there is no sufficient space on the disk.
> > But I am not able to find out where exactly the write happens in to the
> > capture file.
>
> That's a developer's question, not a user's question, so it should have
> gone to ethereal-dev@xxxxxxxxxxxx; I'm CCing that list rather than
> ethereal-users.
>
> > Can some one help me in finding out the same.
>
> In Ethereal, it happens in "capture_pcap_cb()". Look for "wtap_dump".
>
> Note, however, that the libpcap capture file format that is Ethereal's
> native format doesn't support circular files - the N+1st packet in a
> capture is always immediately after the Nth packet, it can never be
> before that packet.
>
> Note also that there is already a ring buffer mechanism in Ethereal that
> rotates amongst several files.
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
--
Regards
-----
Richard Sharpe, rsharpe@xxxxxxxxxx, rsharpe@xxxxxxxxx,
sharpe@xxxxxxxxxxxx, http://www.richardsharpe.com
