Ethereal-users: [Ethereal-users] Re: R: [Ethereal-dev] Remote online packet capture?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 23 Oct 2000 16:10:36 -0700 (PDT)
> This allows to the applications written over winpcap/libpcap to
> transparently capture from a remote host if linked with this remote
> version: they need only to specify the name of the adapter with a proper
> syntax (for example "machinename:adaptername") in pcap_open_live, and
> the capture is routed to the remote agent.

The Ethereal code to get a list of interfaces skips addresses that begin
with "dummy", or that included a ":", saying that the latter are
"Solaris virtuals"; I infer from

	http://bugs.apache.org/index.cgi/full/1540

that the syntax of a Solaris virtual interface is "<interface name>:<number>".

This means that a "machinename:adaptername" syntax *might* be
indistinguishable from a virtual interface name, although I don't know
whether Ethereal omits the virtual interfaces because you can't capture
on them, because you wouldn't want to capture on them, or for some other
reason, so I don't know whether simply treating all device names with
colons as remote interface names would work.