Ethereal-dev: Re: [Ethereal-dev] packet drop

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Fri, 15 Apr 2005 20:06:51 +0200
> Any particular reason for using tcpdump rather than tethereal? 

tcpdump does not keep state so you can capture tons of stuff and the
process is not going to eat all the memory available.

On the other hand tethereal keeps stae for several protocols so its
memory usage will keep growing until it crashes.