Ethereal-dev: Re: [Ethereal-dev] formalize ethereal <-> dumpcap protocol.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 13 Feb 2006 17:53:55 +0100
Ethereal development <ethereal-dev@xxxxxxxxxxxx> schrieb am 13.02.06 13:40:40:
> 
> I've been thinking that now that the capture child "lives on its own"
> if we formalize the interface between dumpcap and ethereal it would be
> "easy" to create dumpcap replacements.

Yes, but that interface is still quite experimental and incomplete in it's current state, the whole task is not really finished.

I would like to have the dumpcap interface stable before doing any such things.

Some things still missing:

- support for tethereal (probably some additional things needed)
- get list of available network interfaces (I think this could be done with current dumpcap -D option or similar)
- get detailed information about a specific interface
- get information shown by Capture/Interfaces

I didn't thought deeply at least about the last point and it seems to be some more effort evolved in it.

> 
> For example, I have a perl script that connects via telnet to a
> machine, and every few seconds fetches the lates loglines, converts
> protocol info into binary data and writes to a pipe for "ethereal -i
> -". There are some things that cannot be done this way (mainly
> restarting the capture).
> 
> If we add a mechanism to tell ethereal which "dumpcap" to use ( -X
> captue_agent:capture_prog ?) It would be feasable to use scripts like
> mine as a capture agent.
> 
> I can think in various "toys" that could come out from this the most
> prominent are
>   - a mux to merge the input of several interfaces
>   - a remote capture agent
> 

I see the reasons and I think it would be very beneficial to do so.

So don't get me wrong, I like your idea (in fact I had the same), but it's just too early to do it right now, without having to change this interface several times and therefore the capturing tools, too.

I'll try to implement the next steps in a way that hopefully won't make the dumpcap interface too complicated ...

Regards, ULFL

______________________________________________________________
Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193