[Ulf Lamping <ulf.lamping@xxxxxx>]

Gilbert Ramirez wrote:

>You know what I'd like? I'd like a "pcap" binary that only did
>capturing, including capture filters. I.e., drop the tcpdump packet
>dissection, too.
>  
>
Funny.

That's exactly what I was thinking about for the last half an hour.

A capture only command line tool which doesn't show up any info (a
simple packet count maybe) and gained towards highest possible
performance, that can be achieved with WinPcap/libpcap.

Maybe with two modes of operation:

1) similar to todays implementation in Ethereal
2) use RAM instead of an output file, so you can capture some limited
data to the RAM instead of writing to disk while capturing.

This might involve optimized platform specific code (maybe even
different program versions for Windows/Unix/Linux).

However, I'm doing other things for now,

Regards, ULFL