Wireshark · Ethereal-dev: Re: [Ethereal-dev] packet drop

[Gilbert Ramirez <gilbertr@xxxxxxxxx>]

You know what I'd like? I'd like a "pcap" binary that only did
capturing, including capture filters. I.e., drop the tcpdump packet
dissection, too.

--gilbert

On 4/15/05, Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx> wrote:
> On Fri, 15 Apr 2005, Graeme Hewson wrote:
> 
> > Richard Sharpe wrote:
> >
> > > Ummm, I don't use Ethereal for packet capture. Rather, I use tcpdump and
> > > give it higher priority if needed. (Actually, I do use it under Windows
> > > for packet capture, but that is another story).
> >
> > Any particular reason for using tcpdump rather than tethereal?  The
> > latter might be better suited to someone used to ethereal (e.g., default
> > snapshot length is higher, certainly enough to capture full-length
> > Ethernet packets).
> 
> tcpdump is usually on the machines I capture packets from, and it is lean,
> even compared with tethereal.
> 
> Richard
> -----
> Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
> sharpe[at]ethereal.com, http://www.richardsharpe.com
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 
>