Ethereal-users: Re: [Ethereal-users] tcpdump is "backend"?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Joe Acquisto <joea@xxxxxxxxxxxx>
Date: Thu, 19 Jun 2003 18:20:55 -0400
>6/19/03 4:02:49 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
>On Thursday, June 19, 2003, at 12:58PM, Joe Acquisto wrote:
>
>> Any truth to a statement I heard that tcpdump is the "backend" for 
>> ethereal?
>
>None whatsoever.  Ethereal has its own packet dissecting code, 
>unrelated to tcpdump's packet dissecting code.
>
>Ethereal and tcpdump both use the same library to do packet capture - 
>libpcap - but that's the only code they share.  (They don't even use 
>the same code to read capture files; tcpdump uses libpcap, but Ethereal 
>has its own code, which can read libpcap-format files, but can also 
>read other capture file formats as well.)
>
>

Thanks.  I will use this info with relish (or maybe mustard) at my next opportunity.

joea/