Ethereal-dev: Re: [Ethereal-dev] More information about each packet traced?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <rsharpe@xxxxxxxxxx>
Date: Thu, 4 Jul 2002 03:30:52 +0930 (CST)
On Wed, 3 Jul 2002, Mads Nielsen (DXD) wrote:

> Hi,
> 
> We have implemented a version of packet.dll (WINPCAP), that allow us to
> connect to a remote device and collect packets from there. We choosed
> to replace packet.dll to avoid changing the packet interface in e.g. Ethereal.

Wow, that is interesting.
 
> It is possible to select either a single adapter or adapters covering
> more than one interface (e.g. "lan0", "all" or "atm-all").
> Since "all" might include different interfaces (e.g. ATM or LAN) it would be
> nice if it (optionally) was possible to tell the LinkType for each packet captured.
> An ATM LLC header cannot currently be decoded if LinkType is LAN (also TCP is not
> recognized when LinkType=ATM by Capture Statistic Window, TCP stream analysis etc.).
> Also sometimes it is valuable to know whether a packet was **sent** or **received** on
> a specific link/interface.
> 
> A final wish is if it could be possible to specify the signal number shown in e.g.
> Ethereal. In that way it can be seen where packets have been lost (numbers missing).
> 
> And since the wish list never ends - it could be nice if it was possible to
> add a text comment between the packets (e.g. "packet above discarded due to xxxx").
> Maybe some of the existing

This is something I suggested a while ago, but in a different guise. My 
suggestion was adding a test/description field to the packet formats, but 
this sounds better. Just add a DLT type that is for a comment/description!

Regards
-----
Richard Sharpe, rsharpe@xxxxxxxxxx, rsharpe@xxxxxxxxx, 
sharpe@xxxxxxxxxxxx