"Paul L. Lussier" wrote:
> In a message dated: Tue, 14 Sep 1999 19:33:15 PDT
> Guy Harris said:
>
> >What does it do there that Ethereal doesn't already do? (If you click
> >on something in the detail (protocol tree) pane, Ethereal *should* be
> >highlighting, in boldface, the relevant octets of the packet in the data
> >pane.)
>
> Really? Hmmm, never noticed, though I haven't looked too hard either. I'll
> have to play with it today and take notice :)
>
Yes, but consider it in light of filter building - *click* *click* - and
you're filter on ip, ip + port, etc - much handier.
>
> >> 4. flexible capture buffer size
> >
> >"Capture buffer size" in what sense? Some programs have a fixed-size
> >capture buffer, and will either stop capturing or will wrap around when
> >that buffer fills up; Ethereal saves to a file, so it doesn't have a
> >point at which it stops.
>
But it would be nice to rig a condition for start (possible with netxray)
and limit it to 256k of traffic (also possible with netxray). You can do this
now with libpcap, but its arcane and I have just so much room in my head for
text representations of things I visualize.
>
> Unless the filesystem you're saving the file to fills up, or you hit the 2GB
> file size limitation (on most OSes (does Linx still have this one?))
> --
>
> Seeya,
> Paul
> ----
> Depression is merely anger without enthusiasm.
> There cannot be a crisis today; my schedule is already full.
> A conclusion is simply the place where you got tired of thinking.
> If you're not having fun, you're not doing it right!