[Ben Greear <greearb@xxxxxxxxxxxxxxx>]

Is there any way (besides export DISPLAY.....) to snoop a remote
computer with ethereal?

I'm thinking something like this:

A daemon process runs on the remote machine, snooping a port that
isn't the one passing data back to the GUI (otherwise, it would
be rather recursive!!).  Then, have the GUI listening to that socket
as if it were snooping locally.  The communication over the socket
would mostly be the raw packets, as determined by the filter,
with a few cmds to control things as needed.  The GUI would run
locally...

There would be obvious performance problems if the filter was
too lax on a noisy wire, but I think it could be a neat feature
for tight filters and/or lower traffic levels...

Anyone have any thoughts on this?

Ben

-- 
Ben Greear (greearb@xxxxxxxxxxxxxxx)  http://scry.wanfear.com/~greear 
Author of ScryMUD:  scry.wanfear.com 4444        (Released under GPL)
http://scry.wanfear.com