Ethereal-users: Re: [Ethereal-users] tcpdump is "backend"?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 19 Jun 2003 13:02:49 -0700

On Thursday, June 19, 2003, at 12:58PM, Joe Acquisto wrote:

Any truth to a statement I heard that tcpdump is the "backend" for ethereal?

None whatsoever. Ethereal has its own packet dissecting code, unrelated to tcpdump's packet dissecting code.

Ethereal and tcpdump both use the same library to do packet capture - libpcap - but that's the only code they share. (They don't even use the same code to read capture files; tcpdump uses libpcap, but Ethereal has its own code, which can read libpcap-format files, but can also read other capture file formats as well.)