Ethereal-dev: Re: [Ethereal-dev] Limitations of Ethereal capture command line parameters (inco
Guy Harris wrote:
> Ulf Lamping wrote:
>
>> 1.) the (Win32 specific) "Buffer size: x megabyte(s)" parameter
>> can't be set (maybe adding a new -W option?)
>
>
> In WinDump (and perhaps, once I do the next-generation libpcap open API,
> in tcpdump as well - the problem is that, in BPF, you can't set the
> buffer size once an interface is bound to a BPF device, and that's done
> when you open, so you can't set the buffer size after you've opened a
> device), that's done with a "-B" option.
It sounds reasonable, to have similar options for WinDump and Ethereal.
BTW: As I've changed the capturing into the two task model, using this
option from the GUI currently won't have any effect, as it's simply not
passed to the child process.
>
> In Ethereal, unfortunately, that currently sets the byte view size. I
> think we now remember the sizes of panes in the recent file (and, if we
> don't, we probably should) - are the "-B" and "-P" options still useful?
Yes, we set the pane sizes by values from the recent file.
Unfortunately, the functionality to *get* the pane size
(gtk_paned_get_position
<mailbox:///C%7C/Documents%20and%20Settings/lu2145/Application%20Data/Thunderbird/Profiles/3v61ea74.default/Mail/pop3.web.de/Drafts?number=16684&part=1.2&filename=GtkPaned.html>)
is not existing in GTK1.x (and I tried to circumvent these, by looking
at the GTK implementation internals and didn't found a way. So we only
do this for GTK2.x versions today :-(
> If they are, we might want to replace them with different options,
> such as a single option that takes a comma-separated list of
> "pane-name=pane-size" or something such as that.
>
We could use the same mechanism like the things we do for the auto stop
and preferences things. So something like "-a key:value" like option
which can appear multiple times at the command line.
I'm unsure, which character to choose for this, -g or -G might be an
idea (or is this already used by tcpdump/WinDump).
Regards, ULFL
