Ethereal-dev: Re: [ethereal-dev] Editpcap.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Thu, 25 Nov 1999 21:56:50 +1000
At 01:35 AM 11/26/99 -0800, Guy Harris <gharris@xxxxxxxxxxxx> wrote:

>BTW, given that it can read any capture file format that Ethereal can
>read, and, in the future, may be able to write capture file formats
>other than "libpcap" format, perhaps it should be called just "editcap"?

This is a good suggestion.

My suggestion is that we should create a utilities directory and add this
and any other useful programs to it.

I envision (envisage for non-US speakers of English :-) the following being
available:

1. A command line tool that allows you to enter filtering expressions to
select and output a capture file.

2. A GTK+-based tool that allows you to select frames for inclusion/deletion.

Actually, does anyone know of a GTK object that allows you to render a
series of frames as an array of bytes so you can take slices both
horizontally and vertically? Eg

                                1  1  1  1  1  1  1  1  1  1
     1  2  3  4  5  6  7  8  9  0  1  2  3  4  5  6  7  8  9
   ----------------------------------------------------------
Fr1: A1 23 BB ....
Fr2: A5 11 CC ....

And then you should be able to select a series of bytes horizontally, and
also select a whole column etc.


Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx, Master Linux Administrator :-),
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Co-author, SAMS Teach Yourself Samba in 24 Hours
Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course