Ethereal-users: RE: [Ethereal-users] Truly infinite capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "McNutt, Justin M." <McNuttJ@xxxxxxxxxxxx>
Date: Mon, 4 Dec 2000 11:35:18 -0600
I looked at this site, and it looks like you are correct.  I'm downloading
this now and will be giving it a shot shortly.

Thanks!

--J

> -----Original Message-----
> From: Gerald Combs [mailto:gerald@xxxxxxxx]
> Sent: Sunday, December 03, 2000 4:37 PM
> To: McNutt, Justin M.
> Cc: 'Guy Harris'; 'ethereal-users@xxxxxxxxxxxx'
> Subject: RE: [Ethereal-users] Truly infinite capture
> 
> 
> On Sun, 3 Dec 2000, McNutt, Justin M. wrote:
> 
> > > I.e., you want all of Ethereal except for the part that dissects
> > > packets? :-)
> > 
> > Not exactly.  I want all of Ethereal, but once it has 
> dissected a packet, I
> > want it to keep the analysis in a counter and throw away 
> the actual packet.
> > Therefore, the capture can run almost infinitely (to the 
> limit of the
> > counter, which would need to be a 32-bit counter in my case).
> 
> This sounds an awful lot like ntop (http://www.ntop.org).
>