Ethereal-dev: RE: [ethereal-dev] Question on remote snooping.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Visser, Martin (SNO)" <Martin.Visser@xxxxxxxxxx>
Date: Fri, 11 Feb 2000 09:17:46 +0800
Actually I think this is actually implemented as a moving window. You set
the capture buffer size and start the capture process. Then the manager goes
and regularly polls the agent and pulls down packets captured since the last
poll. A few years ago in another life we were using HP NetMetrix to do this
and I'm almost certain you could have it doing live scrolling

Martin

Martin Visser
Technology Consultant - Compaq Services

Compaq Computer Australia
410 Concord Road
Rhodes, Sydney NSW 2138
Australia

Phone: +61-2-9022-5630
Mobile: +61-411-254-513
Fax:+61-2-9022-7001
Email:martin.visser@xxxxxxxxxx



> -----Original Message-----
> From: Guy Harris [mailto:guy@xxxxxxxxxx]
> Sent: Friday, 11 February 2000 11:55
> To: Visser, Martin (SNO)
> Cc: ethereal dev
> Subject: Re: [ethereal-dev] Question on remote snooping.
> 
> 
> > If this was to be done I'd love it to be done using RMON 
> Packet Capture as
> > per RFC1757 <http://www.cis.ohio-state.edu/htbin/rfc/rfc1757.html>
> 
> That's certainly one flavor of remote capture that would be useful,
> although, as noted in an earlier message, you can't, as far as I know,
> get a live capture - you have to set a filter on the remote device,
> start capture, and then grab the packets once the capture is done.
> 
> Other forms of remote capture might be useful as well.
>