Ethereal-dev: Re: [Ethereal-dev] suggestion for something to include with ethereal...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Thu, 28 Dec 2000 16:37:03 -0600
On Thu, 28 Dec 2000 14:18:21 -0800
Guy Harris <gharris@xxxxxxxxxxxx> wrote:

> 
> Given that it doesn't include any dissection code, I'd be inclined
> either to include it in libpcap or to make it a separate program from
> tcpdump.org, if "tcpdump -w" and "tethereal -w" aren't lightweight
> enough.

Yes, a program called "pcap" or something should be included with
libpcap. This also helps to solve the problem of root-only
captures on Linux (if you don't use capabilities). Pcap can be set
setuid root and executable only by user and group, allowing the sysadmin
to define a group that can perform packet captures. Ethereal could
be modified to call pcap to run the capture, avoiding running
Ethereal as root.

--gilbert