Ethereal-dev: Re: [ethereal-dev] pipe capture checked in

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Olivier Abad <abad@xxxxxxxxxxxxx>
Date: Mon, 31 Jul 2000 19:17:09 +0200
On lun, jui 31, 2000 at 09:10:56 -0700, Guy Harris wrote:
> On Mon, Jul 31, 2000 at 05:59:46PM +0200, Olivier Abad wrote:
> > > If you assume that the program writing to the pipe was compiled with
> > > whatever libpcap is installed on the system, then if you use libpcap
> > > rather than Wiretap to read the capture file, that should make it work.
> > 
> > You can't assume this for remote captures.
> 
> "Remote" as in "a program is running on a remote machine, and sending
> stuff over the wire directly to a pipe on your machine, or to a program
> on your machine that's writing to that pipe"?

Directly to the pipe, e.g. :
ssh user@host tcpdump -w - | ethereal -i - -kS

Olivier
-- 
We know all about the habits of the ant, we know all about the habits of the
bee, but we know nothing at all about the habits of the oyster.  It seems
almost certain that we have been choosing the wrong time for studying the
oyster.
		-- Mark Twain, "Pudd'nhead Wilson's Calendar"