Ethereal-users: RE: [Ethereal-users] Possible Protocol Mismatch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Thu, 5 Jun 2003 10:48:32 +0200

>-----Original Message-----
>From: Guy Harris [mailto:gharris@xxxxxxxxx]
>Sent: donderdag 5 juni 2003 10:28
>To: Lambrecht Joris
>Cc: 'Martin Regner'; ethereal-users@xxxxxxxxxxxx
>Subject: Re: [Ethereal-users] Possible Protocol Mismatch
>
>
>On Thu, Jun 05, 2003 at 10:08:58AM +0200, Lambrecht Joris wrote:
>> 		Ethereal could use : 
>> 
>> 			* a display of the date/time (detailed view in
>> win32) of the capture-files to load.
>
>What do you mean by "date/time of the capture files to load"?  The time
>stamp of the capture file, i.e. the time the file was last modified? 
>(There is nothing in Ethereal captures file indicating when the capture
>started - the libpcap format it uses doesn't have any such time stamp -
>although it could show the time stamp of the first packet.)
>
>Where would it show this?  (What do you mean by "detailed view in
>win32"?)
>

	I'm merely pointing at the way windows displays files in icon-view,
list-view or detailed-view. Detailed-view means that when you open a file
the dialog shows, next to the filename, the date/time of creation. That's
all.

>> 			* Some sort of scheduler (AT-like) in the
>> GUI-version could be nice as well
>
>What would the scheduler schedule?
>

	It would be nice to be able to capture packets at a given time and
review the data in the morning for example. This way one could do some
coordinated/scheduled test on the network while absent. Yep, i admit it's
quite an ungeekish thing to do from a gui but hey, i was merely suggesting
such a feature, since i'm just a mere mortal.

>> 			* A way of selecting packets and saving 
>them without
>> marking them would be a nice feature as well.
>
>Well, the selection mode for Ethereal's packet list is "only one packet
>can be selected", as the packet list pane shows the selected packet;
>it'd have to be something other than a conventional selection.
>

	Marking packets one by one i pretty tedious and thus time-consuming.
Given the fact this is a newbie talkin' this is an approach that might just
have well grown out of experience. 

Just for clarity, i was referring to the use of the ctrl and shift-key in
windows to make multiple selections. Quite practical if you want to isolate
a larger number of packets out of a large list of packets. In case you
shouldn't be using windows. Pressing the ctrl-key together with clicking an
item selects those items even after releasing the ctrl-key. While e pressing
the shift key while selecting makes a start-to-end selection of all packets
between the first and last you clicked on. 

Regards,

Joris