Ethereal-dev: Re: [Ethereal-dev] packet drop

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 15 Apr 2005 12:14:52 -0700
LEGO wrote:


tcpdump does not keep state
(Note that, if you're not writing to a capture file, so that it's dissecting the packets, it *does* keep state unless you specify the "-S" flag.) 


On the other hand tethereal keeps stae for several protocols so its
memory usage will keep growing until it crashes.
If you're writing to a capture file, and aren't using a "read filter", and aren't using the "-S" flag (which, in Tethereal, means "print the dissected packets as you're saving them to a file"), Tethereal shouldn't be dissecting the packets (if it is, that's a bug), and shouldn't be keeping any state.