Ethereal-users: Re: [Ethereal-users] Two packet intercept question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: work@xxxxxxxxxxx
Date: Wed, 10 Jan 2001 15:31:04 -0700
A library called libnids already exists which can do TCP defragmentation
and reassembly. The library basically took the code from the Linux 2.0
TCP/IP stack and created a standalone library. 

http://freshmeat.net/projects/libnids/?highlight=libnids


On Wed, Jan 10, 2001 at 02:23:35PM -0800, Hardware Stuff wrote:
> 
> Oh-oh.  So the lower-level libraries do not do this either....
> 
> I actually do not need the packets re-assembled (easy perl problem),
> it would be sufficient if the capture filter could be set as a
> trigger, and then the trigger packet and N subsequent packets were
> dumped (in the sense of a hardware logic analyzer).  This sounds
> similar to the 'alarm' feature mentioned on the wish list.
> 
> Thanks

-- 
=========================================================================
Clinton Work                                        clinton@xxxxxxxxxxx
Calgary, Alberta