> 1. nice visual decodes of various protocols - click on a portion of the
> frame,
> say IP headers, and it highlights that bit of the frame
What does it do there that Ethereal doesn't already do? (If you click
on something in the detail (protocol tree) pane, Ethereal *should* be
highlighting, in boldface, the relevant octets of the packet in the data
pane.)
> 2. a pretty slick capture filter based on IP or mac address
The "libpcap" capture filter mechanism Ethereal has can do that,
although it doesn't (yet) have a GUI to let you construct filters.
> 3. multiple conversation capture ie several source+dest pairs can be
> captured
I.e., the filter can capture multiple source+dest pairs? The "libpcap"
filter mechanism can do that (although, again, you currently have to
know the syntax and type it in).
> 4. flexible capture buffer size
"Capture buffer size" in what sense? Some programs have a fixed-size
capture buffer, and will either stop capturing or will wrap around when
that buffer fills up; Ethereal saves to a file, so it doesn't have a
point at which it stops.
> 5. named capture filters can be created and saved
Ethereal has that in the "Edit/Preferences" dialog box, and named
filters can be retrieved in "Capture/Start", although you can't save a
filter *from* "Capture/Start".
> 6. the traffic matrix thing is eye candy but it can be useful
> 7. multiple stats windows for various things like crc, broadcast, packet
> size distribution, etc
> 8. traffic replay is occasionally useful
We don't have that - the only stat window we have during a capture is
the one that counts packet types.
