I generally deal with low data rates, so maybe I'm unused to the strains
of high speed data captures, but to me it seems the overhead of a single
fopen/fclose call pair shouldn't be so high that it can't be afforded.
From the practical standpoint, is there any good reason why
ethereal/tethereal will open as many file as there are files in the ring
buffer? Is I would have to imagine that having the current file being
written to open would be enough.
ethereal-dev-request@xxxxxxxxxxxx wrote:
2. Re: [Ethereal-users] Questions on using ethereal / tethereal
(Ian Schorr)
3. Re: Re: [Ethereal-users] Questions on using ethereal /
tethereal (Laurent Deniel)
4. Re: Re: [Ethereal-users] Questions on using ethereal /
tethereal (Ian Schorr)
5. Re: [Ethereal-users] Questions on using ethereal / tethereal
(Guy Harris)
6. RE: Re: [Ethereal-users] Questions on using ethere al /
tethereal (Biot Olivier)
7. RE: Re: [Ethereal-users] Questions on using ethere al /
tethereal (Biot Olivier)