Ethereal-users: [Ethereal-users] How does capture to file work?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: faerber@xxxxxxxxxxxxxxxxxxxx (Johannes Faerber)
Date: Wed, 7 Feb 2001 15:05:10 +0100 (MET)
Hi,

we are afraid to loose packets while doing a capture with ethereal
(or tcpdump) without noticing it.

We are thinking about modifying a network card driver in order to
write packets directly to disk (without running ethereal/tcpdump)
and then read and evaluate the raw data using ethereal after the
measurement.

If someone on this list had similar ideas I would be thankful to hear
his experience/advice before we start work. Also I would welcome
comments on the performance of ethereal during capturing (i.e. is
our approach unnecessary because ethereal will definitely not loose
any packets at all?)

Thanks & Regards,
Johannes


--
Institute of Communication Networks and Computer Engineering (IND)
University of Stuttgart
Pfaffenwaldring 47                           Tel: +49-711-685 7968
D-70569 Stuttgart                            Fax: +49-711-685 7983
Johannes Faerber                      faerber@xxxxxxxxxxxxxxxxxxxx