> When I tried to do a save as, the only save option that is usable,
> to a different name so I can save the filtered data I get the following
> error:
>
> The file "(null)" could not be opened: Bad address.
The "Save" and "Save As" code needs a bit of cleaning up; I plan to do
so at some point.
> Also when I attempted to follow the TCP stream it core'd
> (Segmentation fault) with or without a packet selected. It did that in
> 0.6.1 also.
There was, if I remember, a bug in one of the earlier 0.7[.x] releases
wherein it'd dump core in "Follow TCP Stream", but that one got fixed;
it looks as if there's another bug.
If you get a core dump, running "gdb" on the Ethereal binary and core
file, and getting a stack trace with "backtrace" (or "bt", or "where"
for us DBXified old-timers) and sending us the stack trace dump, would
be helpful. If the capture contains no private data, sending us the
capture file would be helpful as well.
It's odd that it core dumped *without* a packet selected - it's supposed
to tell you that you have no packet selected.
> Is there a way to save a file readin from one data format to another
> data format? cpdump to Sniffer would be very handy so I could use some of
> my Win32 tools that only import one foreign packet capture file format,
> uncompressed Sniffer.
Unfortunately, not at present. It wouldn't be too difficult to add
the ability to write at least some other formats to Wiretap, and have
Ethereal use them.
> Lessee, anything else, is there a way to display absolute date &
> time in the display?
The detail pane (middle pane) shows that in the "Frame" section; you
can't get the date in the summary pane (topmost pane), but you can get
the absolute time on that date by selecting it in the dialog box you get
from "Options" under the "Display" menu.
