Ethereal-dev: Re: [Ethereal-dev] stdin capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 27 Sep 2003 16:39:43 -0700

On Sep 27, 2003, at 10:03 AM, Gisle Vanem wrote:

Using tethereal build from yesterdays snapshot to capture from stdin
produces weird results. Like:
  tethereal -nr- | more

Read from stdin, or capture from stdin?

What is tethereal's standard input? Is it being piped to? Note that Wiretap doesn't support reading from non-seekable input sources; pipes are non-seekable input sources on UNIX, and are probably non-seekable on Windows as well. At least on UNIX, it supports "capturing" from a pipe, however (it assumes that the input is in standard libpcap format, so it doesn't do the file-format checks it does when opening capture files - those checks are currently done by reading the input multiple times by seeking backwards and re-reading).