I looked at this site, and it looks like you are correct. I'm downloading
this now and will be giving it a shot shortly.
Thanks!
--J
> -----Original Message-----
> From: Gerald Combs [mailto:gerald@xxxxxxxx]
> Sent: Sunday, December 03, 2000 4:37 PM
> To: McNutt, Justin M.
> Cc: 'Guy Harris'; 'ethereal-users@xxxxxxxxxxxx'
> Subject: RE: [Ethereal-users] Truly infinite capture
>
>
> On Sun, 3 Dec 2000, McNutt, Justin M. wrote:
>
> > > I.e., you want all of Ethereal except for the part that dissects
> > > packets? :-)
> >
> > Not exactly. I want all of Ethereal, but once it has
> dissected a packet, I
> > want it to keep the analysis in a counter and throw away
> the actual packet.
> > Therefore, the capture can run almost infinitely (to the
> limit of the
> > counter, which would need to be a 32-bit counter in my case).
>
> This sounds an awful lot like ntop (http://www.ntop.org).
>