Ethereal-dev: Re: [Ethereal-dev] An RMON filter and capture capture :-)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Fri, 9 Feb 2001 18:15:20 -0500
On Fri, Feb 09, 2001 at 07:11:32AM +1000, Richard Sharpe wrote:
> Hi,
> 
> Does anyone have an application that can use the RMON filter and capture
> groups to capture packets from an RMON capable device?
> 
> If so, could they send me a capture of such, so I can get my head around
> what wiretap will have to send to capture packets from an RMON capable
> device?

Is it really wiretap that should have this functionality? It's not really
a file format.  Perhaps we should treat it as a capture facility.
Ethereal really does need some sort of capture "plugin" or "wrapper"
mechanism. Just as it would be nice to move the libpcap capturing
into a separate executable which deals only with capturing packet and
saving them to a file, I can imagine an "rmon" executable which speaks
RMON and saves captured packets to a file (perhaps in libpcap format).
These executables ("rmon" and "pcap") could either save packets to
a file or provide them via stdout or some shared memory segment.

Ethereal/tethereal, and even tcpdump for that matter, could use
either of these packet-capturing  executables for getting packets.

--gilbert