Ethereal-users: [Ethereal-users] FW: Display Filters on Multiple Files.
I installed CygWin, but I can not find tethereal for Windows. Do you
know where I can find it?
Eric
-----Original Message-----
From: Jeff Morriss [mailto:jeff.morriss@xxxxxxxxxxx]
Sent: Thursday, December 29, 2005 9:26 AM
To: Renkoff, Eric [APC:2914:EXCH]
Subject: Re: Display Filters on Multiple Files.
[IMO it's frequently good to keep discussions on the -users mailing list
so (1) others can respond if they know better or have more time and (2)
others can learn from our discussions.]
Anyway, 'tethereal' is the command line version of Ethereal (no GUI).
It is available on Windoze though I usually don't install it on my PC
because the command prompts on Windoze are unusuable (IMO).
Using 'tethereal' the way I suggested may be difficult on Windoze
because I don't think the command prompt has a very powerful script
language (but I'm not overly familiar with it). If you had Cygwin
(http://www.cygwin.com/) on your PC then you could have a Unix-style
shell (bash) where the syntax I showed you would work.
You're right, though that 3.5 Gigabytes is probably too big for a PC to
handle (Ethereal is generally considered to be not very good for use
with huge files).
So, your best options are probably:
- install Cygwin and bash and use Tethereal from that (with the 'for'
loop I mentioned)
- install Ethtereal on a Unix box and run Tethereal from there
Which of those is better probably depends on what's easier for you
and/or what you're more familiar with.
Also, you mentioned having to "recreate" your display filter: you should
be able to, in Ethereal, just copy the display filter from the display
filter box and use it with 'tethereal' (or another Ethereal session).
Regards,
-Jeff
Eric Renkoff wrote:
> Thanks for the reply, but can you briefly explain what "tethereal" is?
> I have access to plenty of Unix machines but I have Ethereal installed
> on my Windows machine. Do I have to install Ethereal on a Unix box to
> use the solution that you suggested? I guess that I will have to
> somehow re-create my display filter on the Unix machine. can you
> explain how to do that, or point me to a page that explains how? The
> total size of my 183 files is 3.5 GigaBytes (kind of large for a
> single merged file, or do you think that it will work that way?).
>
> Thanks
>
> Eric
