Ethereal-dev: Re: [ethereal-dev] Expert mode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Tue, 18 Jul 2000 02:32:43 +0900
Hi,

At 03:16 PM 7/17/00 +0100, John Bourke wrote:
>Hello again !
>
>Has anyone considered an expert mode, for spotting network anomolies, such
>as excessive retransmissions ?

Again, I think that this is not a job for Ethereal, but is a job for
another tool that understands the structure of the protocols involved.  It
would sort through the data and apply some heuristics to spot anomalies.

Such a tool, and Ethereal, would be helped if there was an underlying
library that knew how to decode packets, so each higher level tool could
concentrate on its own job. In the case of Ethereal, that job is to display
the decoded packets.

>john
>
>

Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Contributing author, SAMS Teach Yourself Samba in 24 Hours
Author, Special Edition, Using Samba