All,
I tried to use tethereal -z at a Debian box but this option is not available.
Any idea ?
Frank
watt:~# tethereal -z io,phs
tethereal: invalid option -- z
tethereal: Unable to parse filter string (parse error).
watt:~# tethereal -h
This is GNU tethereal 0.9.4, compiled with GLib 1.2.10, with libpcap 0.6, with libz 1.1.4, without UCD SNMP
tethereal [ -DvVhlp ] [ -a <capture autostop condition> ] ...
[ -b <number of ring buffer files> ] [ -c <count> ]
[ -f <capture filter> ] [ -F <capture file type> ]
[ -i <interface> ] [ -n ] [ -N <resolving> ]
[ -o <preference setting> ] ... [ -r <infile> ] [ -R <read filter> ]
[ -s <snaplen> ] [ -t <time stamp format> ] [ -w <savefile> ] [ -x ]
Valid file type arguments to the "-F" flag:
libpcap - libpcap (tcpdump, Ethereal, etc.)
rh6_1libpcap - Red Hat Linux 6.1 libpcap (tcpdump)
suse6_3libpcap - SuSE Linux 6.3 libpcap (tcpdump)
modlibpcap - modified libpcap (tcpdump)
nokialibpcap - Nokia libpcap (tcpdump)
ngsniffer - Network Associates Sniffer (DOS-based)
snoop - Sun snoop
netmon1 - Microsoft Network Monitor 1.x
netmon2 - Microsoft Network Monitor 2.x
ngwsniffer_1_1 - Network Associates Sniffer (Windows-based) 1.1
(null) - Network Associates Sniffer (Windows-based) 2.00x
visual - Visual Networks traffic capture
default is libpcap