1. General
----------
We have enhanced the Ethereal capture function by two new stop mechanisms:
a) it is now possible to configure the maximum capture duration in seconds.
b) it is now possible to configure the maximum capture file size in
kilobytes.
Further, it is now possible to write the capture data to a set of files in
ringbuffer style instead of using just one file. This allows the user to do
an 'endless' capture without filling up the harddisk. The ringbuffer just
works,
if real time capturing is disabled. Ringbuffer capturing just creates a
configurable
number of dump files. To view the content of the files, each of them must be
opened manually. The created dump files have a time stamp as part of their
name.
2. Implementation
-----------------
There are three new modules (capture_stop_conditions, conditions and
ringbuffer).
The main part of the features described above is implemented in these new
modules.
Existing code has been modified in several places. It makes no sense to
discribe
all changes in detail here. We think, it is better if some people will have
a
look at the new code and ask us particular questions about it. Of course, we
would
like to get these new features integrated in the Ethereal software main
stream. The
changes are included in the diff file 'capture-stop.diff'.
Thomas Wittwer thomas.wittwer@xxxxxxxx
Matthias Nyffenegger matthias.nyffenegger@xxxxxxxx
-------------------------------------------------------------
ICLIP AG http://www.iclip.ch
Thomas Wittwer mailto:thomas.wittwer@xxxxxxxx
Postfach 3001 Bern +41 (0)31 376 20 16
-------------------------------------------------------------
Attachment:
capture_stop_conditions.c
Description: Binary data
Attachment:
capture_stop_conditions.h
Description: Binary data
Attachment:
conditions.c
Description: Binary data
Attachment:
conditions.h
Description: Binary data
Attachment:
ringbuffer.c
Description: Binary data
Attachment:
ringbuffer.h
Description: Binary data
Attachment:
capture-stop.diff
Description: Binary data