[Guy Harris <guy@xxxxxxxxxx>]

On Thu, Jan 16, 2003 at 03:25:30PM -0500, Robert Casto wrote:
> Guy,

You are asking ethereal-users, which is the right thing to do, not just
asking me, as that would be the wrong thing to do.  (It is almost
*always* the wrong thing to do to ask only me questions about Ethereal,
Tethereal, tcpdump, libpcap, and the like, as that assumes that I will
be able to answer the question better than anybody else, which is often
an incorrect presumption - I might not be able to answer it at all, or
somebody else might have a better answer.)

> I was wondering if there was a different way I could get processed data
> from Tethereal?
> 
> What I want to do is log all the HTTP requests and write out different
> pieces of information. The options print a one line synopsis or a full
> blown breakdown of the protocol.
> 
> What I want to do is pull info from the processed info, and then output
> pieces like the IP source and destination addresses and the HTTP header.
> This way I can do logging of web servers without the servers having to
> do it themselves which slows them down.

There is no other form of output available from Tethereal, as nobody's
written any code to do that.  You'd have to write a script to parse the
one-line summary or full-blown breakdown, or modify the Tethereal code.