Ethereal-dev: Re: [Ethereal-dev] RE: TCP sniffing using Tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Sat, 16 Apr 2005 11:44:10 +0200
Gilad Evrony wrote:

>In short, I'm proposing to add a stateful capability to tethereal, instead
>of its currently stateless implementation. 
>  
>
The implementation *is* stateful already. That's how TCP reassembly and
all such things work.

>My other idea was to add a function to ethereal to decode all the packets of
>a capture file into all the different TCP/UDP sessions that were captured,
>instead of just one by one using the "follow TCP stream" function.
>  
>
You may have a look at the Statistics/Conversations dialog (well, the
TCP part in your case).

>I'm sure some of you with much more in depth knowledge of ethereal could
>implement this in shorter time than I could.
>  
>
Hmmm, seems to be generally true  ;-)

Regards, ULFL