Ethereal-dev: Re: [ethereal-dev] Suggestion for improvement (dflt filter)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 8 Jan 2000 23:01:45 -0800
> It took me quite a while today to actually get ethereal working.
> The problem was that I had to enter a filter, or it would capture
> nothing.  In retrospect, this is not too un-reasonable,

No, it's completely unreasonable.  A blank filter *should* mean "capture
everything", not "capture nothing".

It's also completely *unintentional*; it's also almost certainly due to
a bug in your OS - you're probably running Red Hat Linux 6.1, or a
derivative thereof, or perhaps SuSE 6.3 (which may have a
similarly-"improved" libpcap), or some other Linux with a
similarly-"improved" libpcap.  On other platforms, a blank filter *does*
mean "capture everything".

0.8.1 will have a workaround for that bug.