Ethereal-dev: Re: [Ethereal-dev] PATCH - Allow editcap to report # of packets infile

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ian Schorr <ethereal@xxxxxxxxxxxxx>
Date: Tue, 27 Jul 2004 18:38:44 -0400
On Jul 27, 2004, at 3:38 PM, Olivier Biot wrote:

I think one interesting tool is a tool which acts like the *NIX "file"
command which guesses the file type. How about calling this new tool
(which only READS capture files) cap_info, cap_type or cap_file? The
code you wrote fits best in such a new tool.

Is there anything else in particular that you'd like this tool to do? I'm envisioning a read-only utility that would allow reporting of:

- file size (in bytes)
- file size (in # of packets)
- capture type
- encapsulation type
- timestamp of first packet
- timestamp of last packet
- capture duration

Anything else? I tend to prefer that any statistics that require dissection remain inside tethereal, and keep this utility relatively simple.

And any other suggestions for a name? So far I've come up with viewcap or capstat, though I think both of those names are misleading. Maybe capinfo works...

Ian