Ethereal-users: RE: [Ethereal-users] Truly infinite capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gerald Combs <gerald@xxxxxxxx>
Date: Sun, 3 Dec 2000 16:37:19 -0600 (EST)
On Sun, 3 Dec 2000, McNutt, Justin M. wrote:

> > I.e., you want all of Ethereal except for the part that dissects
> > packets? :-)
> 
> Not exactly.  I want all of Ethereal, but once it has dissected a packet, I
> want it to keep the analysis in a counter and throw away the actual packet.
> Therefore, the capture can run almost infinitely (to the limit of the
> counter, which would need to be a 32-bit counter in my case).

This sounds an awful lot like ntop (http://www.ntop.org).