Ethereal-users: Re: [ethereal-users] What is good about netxray

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: puzzled <puzzled@xxxxxxxx>
Date: Wed, 15 Sep 1999 21:15:52 -0500
"Paul L. Lussier" wrote:

> In a message dated: Tue, 14 Sep 1999 19:33:15 PDT
> Guy Harris said:
>
> >What does it do there that Ethereal doesn't already do?  (If you click
> >on something in the detail (protocol tree) pane, Ethereal *should* be
> >highlighting, in boldface, the relevant octets of the packet in the data
> >pane.)
>
> Really?  Hmmm, never noticed, though I haven't looked too hard either.  I'll
> have to play with it today and take notice :)
>

      Yes, but consider it in light of filter building - *click* *click* - and
you're filter on ip, ip + port, etc - much handier.


>
> >>    4. flexible capture buffer size
> >
> >"Capture buffer size" in what sense?  Some programs have a fixed-size
> >capture buffer, and will either stop capturing or will wrap around when
> >that buffer fills up; Ethereal saves to a file, so it doesn't have a
> >point at which it stops.
>

      But it would be nice to rig a condition for start (possible with netxray)
and limit it to 256k of traffic (also possible with netxray). You can do this
now with libpcap, but its arcane and I have just so much room in my head for
text representations of things I visualize.


>
> Unless the filesystem you're saving the file to fills up, or you hit the 2GB
> file size limitation (on most OSes (does Linx still have this one?))
> --
>
> Seeya,
> Paul
> ----
>             Depression is merely anger without enthusiasm.
>      There cannot be a crisis today; my schedule is already full.
>   A conclusion is simply the place where you got tired of thinking.
>          If you're not having fun, you're not doing it right!