Wouldn't it make more sense to build that capability into libpcap? Then it
is implicity available to ethereal and any other libpcap based sniffer?
i.e. define a special class of interface names that can be passed to
libpcap, such as "lucent:hostname", "ssh:hostname" or something along those
lines.
-- Nathan
------------------------------------------------------------
Nathan Neulinger EMail: nneul@xxxxxxx
University of Missouri - Rolla Phone: (573) 341-4841
Computing Services Fax: (573) 341-4216
> -----Original Message-----
> From: Gilbert Ramirez [mailto:gram@xxxxxxxxxx]
> Sent: Wednesday, February 09, 2000 9:55 AM
> To: Ben Greear
> Cc: Gilbert Ramirez; ethereal dev
> Subject: Re: [ethereal-dev] Question on remote snooping.
>
>
> On Tue, Feb 08, 2000 at 10:42:52PM -0600, Ben Greear wrote:
> >
> >
> > > Ethereal could have a multiple capture options from the GUI:
> > >
> > > 1. Use the regular libpcap (and in some far-off future, wiretap)
> > > capture facility.
> > >
> > > 2. Run ssh to a remote host and run tcpdump/snoop/tethereal to
> > > capture data. (Probably not tethereal, since it doesn't
> > > dump binary data to stdout)
> > >
> > > 3. Run a telnet session to a Lucent/Ascend or Toshiba ISDN router
> > > and capture the hex dump to a file.
> > >
> > > --gilbert
> >
> > Any idea of the development time it'd take to do this? Is it coming
> > soon? I may have some time to dedicate to it in a month or so...but
> > please don't wait on me :)
>
> It doesn't sound too hard to implement, but I had not planned
> on doing so in the near future because of other Ethereal areas I'm
> working on.
>
> --gilbert
>