Usage patterns differ.
Myself, I would only use tetherereal to capture live data,
and I would only use ethereal for post-capture analyzis.
Other users use the tools differently.
----- Original Message -----
From: "Guy Harris" <guy@xxxxxxxxxx>
To: "Ronnie Sahlberg" <rsahlber@xxxxxxxxxxxxxx>
Cc: "Guy Harris" <guy@xxxxxxxxxx>; <ethereal-dev@xxxxxxxxxxxx>
Sent: Saturday, November 03, 2001 1:56 PM
Subject: Re: [Ethereal-dev] TFTP
> > (IMHO tethereal is something for real-time logging similar to tcpdump
>
> That's not always the case; people use tethereal to read capture files
> and dissect them, piping the output to, say, a Perl script to do
> higher-level analysis, for example. (Having a way to make it write out
> XML, with some DTD for packet dissections, might make that even more
> useful.)
>
> > while ethereal is mainly for off-line analysis and x-referencing of
> > existing capture files)
>
> That's not always the case - I often use Ethereal to do live captures.
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>