Ethereal-dev: Re: [Ethereal-dev] Newbie : How to pass my self generated packets to ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 23 May 2002 12:04:31 -0700
On Thu, May 23, 2002 at 06:10:41PM +0530, Prasenjit Chakraborty wrote:
> I have a Linux box. But I don't think ethereal supports reading from a 
> FIFO or a PIPE, does it?

Ethereal doesn't support reading a capture file from a pipe - it'd have
to make a copy of the data in the pipe, as it'd have to go back and
re-read a frame if you select it in the packet list, and reread many
frames if you try to save the capture or print it.

However, it *does* support "capturing" from a pipe (and it *does* write
the "captured" frames to a file, just as it does when capturing from a
networking device).  The data stream on the pipe must be in the form of
a standard libpcap capture file.

The way you capture from a named pipe is to specify the pathname of that
pipe as a capture device in the "Interface" field of the "Capture
Options" dialog box.