Ethereal-dev: Re: [Ethereal-dev] Re: [Ethereal-cvs] rev 16615: /trunk/image/: Makefile.nmake d

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Tue, 29 Nov 2005 00:02:11 +0100
Joerg Mayer wrote:


On Mon, Nov 28, 2005 at 10:45:12PM +0100, Ulf Lamping wrote:
a: don't need to load a whole new instance of Ethereal (which is far more than we need to do) as this takes it's time. A small tool (the Win32 exe seems to become ~200kB instead of the xMB "monster" Ethereal is) can probably be loaded much faster (hmmm, with todays operating system caching I'm not too sure about this) 
Not valid on unix/linux

Not sure what you mean with this ...


Just a heretic thought: Why not use tcpdump to do the capturing for us?
In case we want the manpage for the capture syntax installed, we need
tcpdump anyway.
Be careful with your heretic thoughts: you'll never expect the Spanish inquisition ;-)
Well, tcpdump lacks of the same problem as Ethereal, mixing capture and analyze code. Obviously not with the same impact as with Ethereal, but the problems remain at least to some degree.
Another reason not using tcpdump (yes, I thought about that too) would be the need to support all the different tcpdump versions on all the different platforms.
We might even need to install tcpdump on the systems where it's not installed as default (debian, Win32, ...) so it's really not the way I'd like to go. 

Regards, ULFL