Wireshark · Ethereal-dev: RE: [Ethereal-dev] Enhancement for long sniffing sessions with et hereal

["Eichert, Diana" <deicher@xxxxxxxxxx>]

Guy

I understand the issue with "Update list of packets in real time", but for
our uses that is not a problem.  We have several systems located around our
facility, where we leave tethereal running constantly with capture filters,
when something interesting occurs we end the captures, then bring the
capture files into ethereal running on a central system.

For our purposes the ring buffer capability is not desired in ethereal.

I appreciate "it'll get done at some point", that's really what I was
interested in knowing.  Whether the developers thought this was something on
the list for the future.

thanks for your time,

diana eichert

-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxx]
Sent: Wednesday, August 29, 2001 12:31 PM
To: Eichert, Diana
Cc: 'ethereal-dev@xxxxxxxxxxxx '
Subject: Re: [Ethereal-dev] Enhancement for long sniffing sessions with
et hereal


> Will this capability be added to the main source tree at any time?

Assuming

	1) somebody gets the time to look at the code and check it in;

	2) the person who implemented the capability was fully aware
	   that a circular buffer scheme does not work *at all* well
	   with "Update list of packets in real time" and has coped with
	   that (e.g., by simply *not supporting* captures that throw
	   out old packets when you're doing an "Update list of packets
	   in real time" capture);

it'll get done at some point.