Ethereal-dev: Re: [Ethereal-dev] packet drop

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Fri, 15 Apr 2005 23:55:50 +0200
Gilbert Ramirez wrote:

>You know what I'd like? I'd like a "pcap" binary that only did
>capturing, including capture filters. I.e., drop the tcpdump packet
>dissection, too.
>  
>
Funny.

That's exactly what I was thinking about for the last half an hour.

A capture only command line tool which doesn't show up any info (a
simple packet count maybe) and gained towards highest possible
performance, that can be achieved with WinPcap/libpcap.

Maybe with two modes of operation:

1) similar to todays implementation in Ethereal
2) use RAM instead of an output file, so you can capture some limited
data to the RAM instead of writing to disk while capturing.

This might involve optimized platform specific code (maybe even
different program versions for Windows/Unix/Linux).

However, I'm doing other things for now,

Regards, ULFL