Ethereal-users: Re: [ethereal-users] Filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Michael Spiceland" <mspicela@xxxxxxx>
Date: Sat, 17 Jul 1999 12:12:05 -0500
To start, let me tell you my setup.  I have the identical situation on two
computers.  One with a PII400 desktop 64MB of RAM with RH6.0.  Another on a
Celeron 366 laptop with RH6.0 and 64MB of ram.  Both have 3COM NIC's that
have never given me trouble in anyway.

> By "filters", do you mean display filters or capture filters? And yes,
they
> work.

I guess both.  Under preferences there is only one filters section.  In this
section all there is highlighted is the new button.  When I click on it,
nothing happens.  Nothing is in the list box as far as options.  I am
assuming that a list of filters should go here.

> By "the patch", what do you mean?

There is a patch on the download web page right by version .6.3
(ethereal-patch-0.6.3.gz).  I have tried to ungzip it but it complains that
it is not a valid gzip file.  What does this patch do anyways?

> Which version of ethereal are you using?

.6.3

> Did you configure ethereal to use the wiretap library?

I dont think so if it requires anything besides ./configure:make:make
install
I also installed the libcap rpm.  How do I do this?  Could this be what is
wrong?

When I start up Ethereal everything looks fine.  Then when I go to
preferneces I have the situation that I mentioned earlier about their not
being any filters available.  I can still do a capture but it does not show
it real time.  In fact, as soon as I start the capture, both the new capture
window that it brings up and the application window seem to kind of stop
responding and then they periodically update.  I get no real time capture,
just a little window that says how many of each packet is sent (which is
REALLY slow to update anyway).  Then when I hit the stop button to stop the
capture, it takes about 30 sec. to a min. to stop the capture and then it
will show the data that it collected.  I am assuming that something must be
wrong here.

Is Ethereal this slow and unresponsive on other peoples computers?  I am
assuming that I have something incorrect on the setup because I woult think
that a  PII400 with 64MB of ram would be ok cuz we run etherpeak and netXray
on old laptops and they are really fast real time capture!

Please let me know what might be wrong.

Mike