Wireshark · Ethereal-dev: RE: [ethereal-dev] Question on remote snooping.

["Neulinger, Nathan R." <nneul@xxxxxxx>]

Wouldn't it make more sense to build that capability into libpcap? Then it
is implicity available to ethereal and any other libpcap based sniffer?

i.e. define a special class of interface names that can be passed to
libpcap, such as "lucent:hostname", "ssh:hostname" or something along those
lines.

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: Gilbert Ramirez [mailto:gram@xxxxxxxxxx]
> Sent: Wednesday, February 09, 2000 9:55 AM
> To: Ben Greear
> Cc: Gilbert Ramirez; ethereal dev
> Subject: Re: [ethereal-dev] Question on remote snooping.
> 
> 
> On Tue, Feb 08, 2000 at 10:42:52PM -0600, Ben Greear wrote:
> > 
> > 
> > > Ethereal could have a multiple capture options from the GUI:
> > >
> > > 1. Use the regular libpcap (and in some far-off future, wiretap)
> > >         capture facility.
> > >
> > > 2. Run ssh to a remote host and run tcpdump/snoop/tethereal to
> > >         capture data. (Probably not tethereal, since it doesn't
> > >         dump binary data to stdout)
> > >
> > > 3. Run a telnet session to a Lucent/Ascend or Toshiba ISDN router
> > >         and capture the hex dump to a file.
> > >
> > > --gilbert
> > 
> > Any idea of the development time it'd take to do this?  Is it coming
> > soon?  I may have some time to dedicate to it in a month or so...but
> > please don't wait on me :)
> 
> It doesn't sound too hard to implement, but I had not planned
> on doing so in the near future because of other Ethereal areas I'm
> working on.
> 
> --gilbert
>